Book Store Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel.Read More ...
Continue Reading
November 29, 2022
This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...
Continue Reading
November 29, 2022
Airtable.js is the JavaScript client for Airtable. Prior to version 0.11.6, Airtable.js had a misconfigured build script in its source package. When the build script is run, it would bundle environmen ...
Continue Reading
November 29, 2022
The Quiz and Survey Master plugin for WordPress is vulnerable to input validation bypass via the 'question[id]' parameter in versions up to, and including, 8.0.4 due to insufficient input validation t ...
Continue Reading
November 29, 2022
The Simple:Press plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'sforum_[md5 hash of the WordPress URL]' cookie value in versions up to, and including, 6.8 due to insuffi ...
Continue Reading
November 29, 2022
The Appointment Hour Booking plugin for WordPress is vulnerable to iFrame Injection via the âemailâ or general field parameters in versions up to, and including, 1.3.72 due to insufficient i ...
Continue Reading
November 29, 2022
The Quiz and Survey Master plugin for WordPress is vulnerable to iFrame Injection via the 'question[id]' parameter in versions up to, and including, 8.0.4 due to insufficient input sanitization and ou ...
Continue Reading
November 29, 2022
The Simple:Press plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postitem' parameter manipulated during the profile-save action when modifying a profile signature in version ...
Continue Reading
November 29, 2022
Back to Main
