Archive
1 February 2022
Vulnerabilities first published on this day (UTC), newest first.
74 results · Feed
-
Unscored —
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below do not sanitize user input resulting in pre-auth remote code ex…
-
Unscored —
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_post.php.
-
Unscored —
AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php.
-
Unscored —
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_user.php.
-
Unscored —
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/functions/functions.php.
-
Unscored —
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_page.php.
-
Unscored —CVE-2022-24218 EPSS 17%
An issue in /admin/delete_image.php of eliteCMS v1.0 allows attackers to delete arbitrary files.
-
Unscored —
eliteCMS v1.0 is vulnerable to Insecure Permissions via manage_uploads.php.
-
Unscored —CVE-2021-38560 Public exploit
Ivanti Service Manager 2021.1 allows reflected XSS via the appName parameter associated with ConfigDB calls, such as in…
-
Unscored —
UNIVERGE DT 820 V3.2.7.0 and prior, UNIVERGE DT 830 V5.2.7.0 and prior, UNIVERGE DT 930 V2.4.0.0 and prior, IP Phone Ma…
-
Medium 6.5CVE-2021-44451 Scanner template
API sensitive information leak
Apache Superset up to and including 1.3.2 allowed for registered database connections password leak for authenticated users. This information could be accessed in a non-trivial way. Users should upgrade to Apache Superset 1.4.0 or higher.
-
Unscored —CVE-2021-43510 Scanner template
SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the username field in logi…
-
Unscored —
SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the id parameter in view-s…
-
Unscored —
A cross-site scripting (XSS) vulnerability in the Create Post function of Anchor CMS v0.12.7 allows attackers to execut…
-
Medium —CVE-2021-45416 Public exploit
RosarioSIS XSS Vulnerability
Reflected Cross-site scripting (XSS) vulnerability in RosarioSIS 8.2.1 allows attackers to inject arbitrary HTML via the search_term parameter in the modules/Scheduling/Courses.php script.
-
Medium 6.5
Pulsar Admin API allows access to data from other tenants using getMessageById API
In Apache Pulsar it is possible to access data from BookKeeper that does not belong to the topics accessible by the authenticated user. The Admin API get-message-by-id requires the user to input a topic and a ledger id. The ledger id is a pointer to the data,…
-
Critical 9.4
Path Traversal in yuda-lyu/w-zip
Path Traversal in NPM w-zip prior to 1.0.12.
-
Unscored —
Essential Addons for Elementor < 5.0.5 - Unauthenticated LFI
The Essential Addons for Elementor WordPress plugin before 5.0.5 does not validate and sanitise some template data before it them in include statements, which could allow unauthenticated attackers to perform Local File Inclusion attack and read arbitrary file…
-
Unscored —CVE-2022-0220 Scanner template
WordPress GDPR & CCPA < 1.9.27 - Unauthenticated Reflected Cross-Site Scripting
The check_privacy_settings AJAX action of the WordPress GDPR WordPress plugin before 1.9.27, available to both unauthenticated and authenticated users, responds with JSON data without an "application/json" content-type. Since an HTML payload isn't properly es…
-
Unscored —
Link Library < 7.2.8 - Unauthenticated Arbitrary Links Deletion
The Link Library WordPress plugin before 7.2.8 does not have authorisation in place when deleting links, allowing unauthenticated users to delete arbitrary links via a crafted request
-
Unscored —
Link Library < 7.2.8 - Library Settings Reset via CSRF
The Link Library WordPress plugin before 7.2.8 does not have CSRF check when resetting library settings, allowing attackers to make a logged in admin reset arbitrary settings via a CSRF attack
-
Unscored —
Link Library < 7.2.9 - Reflected Cross-Site Scripting
The Link Library WordPress plugin before 7.2.9 does not sanitise and escape the settingscopy parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting
-
Unscored —
UpdraftPlus < 1.16.69 - Reflected Cross-Site Scripting
The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.69 does not sanitise and escape the updraft_restore parameter before outputting it back in the Restore page, leading to a Reflected Cross-Site Scripting
-
Unscored —CVE-2021-25085 Scanner template
WOOF - Products Filter for WooCommerce < 1.2.6.3 - Reflected Cross-Site Scripting
The WOOF WordPress plugin before 1.2.6.3 does not sanitise and escape the woof_redraw_elements before outputing back in an admin page, leading to a Reflected Cross-Site Scripting
-
Unscored —
NextScripts: Social Networks Auto-Poster < 4.3.25 - Arbitrary Post Deletion via CSRF
The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.3.25 does not have CSRF check in place when deleting items, allowing attacker to make a logged in admin delete arbitrary posts via a CSRF attack
-
Unscored —CVE-2021-25063 Scanner template
Contact Form 7 Skins < 2.5.1 - Reflected Cross-Site Scripting (XSS)
The Skins for Contact Form 7 WordPress plugin before 2.5.1 does not sanitise and escape the tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting
-
Unscored —
Asset CleanUp < 1.3.8.5 - Reflected Cross-Site Scripting via AJAX Action
The Asset CleanUp: Page Speed Booster WordPress plugin before 1.3.8.5 does not sanitise and escape POSted parameters sent to the wpassetcleanup_fetch_active_plugins_icons AJAX action (available to admin users), leading to a Reflected Cross-Site Scripting issue
-
Unscored —
NextScripts: Social Networks Auto-Poster < 4.3.24 - Unauthenticated Stored XSS
The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.3.24 does not sanitise and escape logged requests before outputting them in the related admin dashboard, leading to an Unauthenticated Stored Cross-Site Scripting issue
-
Unscored —
Custom Dashboard & Login Page < 7.0 - Admin+ Stored Cross-Site Scripting
The Custom Dashboard & Login Page WordPress plugin before 7.0 does not sanitise some of its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
-
Unscored —
Asset CleanUp < 1.3.8.5 - Reflected Cross-Site Scripting
The Asset CleanUp: Page Speed Booster WordPress plugin before 1.3.8.5 does not escape the wpacu_selected_sub_tab_area parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting issue
-
Unscored —CVE-2021-24934 Scanner template
Visual CSS Style Editor < 7.5.4 - Reflected Cross-Site Scripting
The Visual CSS Style Editor WordPress plugin before 7.5.4 does not sanitise and escape the wyp_page_type parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue
-
Unscored —
Wicked Folders < 2.18.10 - Subscriber+ SQL Injection
The Wicked Folders WordPress plugin before 2.8.10 does not sanitise and escape the folder_id parameter before using it in a SQL statement in the wicked_folders_save_sort_order AJAX action, available to any authenticated user. leading to an SQL injection
-
Unscored —
Domain Check < 1.0.17 - Reflected Cross-Site Scripting
The Domain Check WordPress plugin before 1.0.17 does not sanitise and escape the domain parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting issue
-
Unscored —
Ninja Tables < 4.1.8 - Admin+ Stored Cross-Site Cross-Site Scripting
The Ninja Tables WordPress plugin before 4.1.8 does not sanitise and escape some of its table fields, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
-
Unscored —
Document Embedder < 1.7.9 - Subscriber+ Arbitrary Private/Draft Post Title Disclosure
The Document Embedder WordPress plugin before 1.7.9 contains a AJAX action endpoint, which could allow any authenticated user, such as subscriber to enumerate the title of arbitrary private and draft posts.
-
Unscored —
WordPress GDPR & CCPA < 1.9.26 - Authenticated Reflected Cross-Site Scripting
The check_privacy_settings AJAX action of the WordPress GDPR WordPress plugin before 1.9.26, available to both unauthenticated and authenticated users, responds with JSON data without an "application/json" content-type. Since an HTML payload isn't properly es…
-
Unscored —
Document Embedder < 1.7.5 - Unauthenticated Arbitrary Private/Draft Post Title Disclosure
The Document Embedder WordPress plugin before 1.7.5 contains a REST endpoint, which could allow unauthenticated users to enumerate the title of arbitrary private and draft posts.
-
Unscored —
Perfect Survey < 1.5.2 - Unauthenticated Stored Cross-Site Scripting
The Perfect Survey WordPress plugin through 1.5.2 does not validate and escape the X-Forwarded-For header value before outputting it in the statistic page when the Anonymize IP setting of a survey is turned off, leading to a Stored Cross-Site Scripting issue
-
Unscored —
Perfect Survey < 1.5.2 - Reflected Cross-Site Scripting
The Perfect Survey WordPress plugin before 1.5.2 does not sanitise and escape multiple parameters (id and filters[session_id] of single_statistics page, type and message of importexport page) before outputting them back in pages/attributes in the admin dashbo…
-
Unscored —
Perfect Survey < 1.5.2 - Unauthorised AJAX Call to Stored XSS / Survey Settings Update
The Perfect Survey WordPress plugin before 1.5.2 does not have proper authorisation nor CSRF checks in the save_global_setting AJAX action, allowing unauthenticated users to edit surveys and modify settings. Given the lack of sanitisation and escaping in the …