The WP Statistics WordPress plugin before 14.0 does not escape a parameter, which could allow authenticated users to perform SQL Injection attacks. By default, the affected feature is available to use ...
Continue Reading
March 27, 2023
The Gallery Blocks with Lightbox WordPress plugin before 3.0.8 has an AJAX endpoint that can be accessed by any authenticated users, such as subscriber. The callback function allows numerous actions, ...
Continue Reading
March 27, 2023
The Cookie Notice & Compliance for GDPR / CCPA WordPress plugin before 2.4.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shor ...
Continue Reading
March 27, 2023
The Formidable Forms WordPress plugin before 6.1 uses several potentially untrusted headers to determine the IP address of the client, leading to IP Address spoofing and bypass of anti-spam protection ...
Continue Reading
March 27, 2023
In JetBrains Hub before 2022.3.15573, 2022.2.15572, 2022.1.15583 reflected XSS in dashboards was possibleRead More ...
Continue Reading
March 27, 2023
In JetBrains TeamCity before 2022.10.3 stored XSS in Perforce connection settings was possibleRead More ...
Continue Reading
March 27, 2023
SQL injection vulnerability found in PrestaShop xipblog v.2.0.1 and before allow a remote attacker to gain privileges via the xipcategoryclass and xippostsclass components.Read More ...
Continue Reading
March 27, 2023
In JetBrains TeamCity before 2022.10.3 stored XSS on âPending changesâ and âChangesâ tabs was possibleRead More ...
Continue Reading
March 27, 2023
Back to Main
