Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The Redux Framework plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.5.11. This is due to the plugin saving arbitrary meta keys under a registered option name without sufficient capability checks or key allowlist / restrictions. This makes it…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise stores the isAdmin flag in remember-me tokens and restores that stale value during automatic login instead of resolving the account's current role from users.txt. A…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing remote command execution IPC frames across the fabric, the receiving switch processes these…
Opis źródłowy NVD · ENCVSS 6,7 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
The Document Gallery WordPress plugin through 5.1.1 does not sanitise or escape several gallery shortcode attributes before embedding them in a single-quoted HTML attribute in the rendered gallery markup, allowing users with the Contributor role and above to inject arbitrary event handlers that…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
The Salon Booking System WordPress plugin before 10.31.11 does not validate a user-supplied image URL before fetching it server-side and writing the response to a publicly accessible location under an attacker-chosen filename, allowing users with the Salon Staff role or higher to force the server…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Unsanitised input in
the "template name" field of SQLView KRIS's Workflow Template feature
is rendered in "onclick" attributes on the main dashboard without
proper server-side sanitisation, allowing an attacker with administrative
access to inject and store malicious scripts that execute in the…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
The Envira Gallery WordPress plugin before 1.16.1 does not sanitise or escape user-supplied gallery display configuration values before storing them and outputting them in an image tag attribute, allowing users with the Author role and above to inject arbitrary web scripts that execute when any…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
The Envira Gallery WordPress plugin before 1.16.1 does not sanitise and escape a gallery item identifier before outputting it in an image tag attribute, allowing users with the Author role and above to inject arbitrary web scripts that execute when any visitor, including an administrator, views a…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
The Horizontal scrolling announcements WordPress plugin through 2.6 does not sanitise and escape one of its announcement settings before outputting it into an attribute context on the front end, allowing users granted access to the announcement management page (Contributor and above, once…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
The Loco Translate WordPress plugin before 2.8.9 does not sanitise and escape some bundle configuration values before outputting them back in an admin page, allowing users with the translator capability and above to perform Stored Cross-Site Scripting attacks against high privilege users such as…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
The Kubio AI Page Builder WordPress plugin before 2.9.3 does not validate the URI scheme of a user-supplied value before outputting it as a link target, allowing users with the contributor role and above to store a payload which executes in the browser of anyone who follows the link, including an…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
An optional, separately licensed repository-connector feature in Kiteworks Core did not neutralize special characters in a user-supplied path before passing it to an external command. An authenticated system administrator could inject additional commands and write arbitrary content to files owned…
Opis źródłowy NVD · ENCVSS 6,6 · EPSS 1,23 % · rekomendacja wg zapisanej polityki
The Ukr-To-Lat WordPress plugin through 1.3.5 does not sanitize and escape a term name before using it in a SQL query, allowing users with Contributor-level access and above to perform SQL injection attacks.
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
The BSK PDF Manager WordPress plugin through 3.8.1 does not properly sanitise and escape a parameter before using it in a SQL statement, which could allow authenticated users with contributor-level access and above to perform SQL injection attacks and read sensitive data such as administrator…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
The Code Snippets WordPress plugin before 3.10.0 does not sanitise and escape a user-supplied parameter before using it in a SQL query in some of its snippet-migration import endpoints, which are accessible to any user holding site-administration capabilities; on a WordPress Multisite network…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can read…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes.
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability in Configuration Management, allowing an attacker to execute specifically crafted commands to reveal system secret through error messages.
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
The Redux Framework plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.5.11. This is due to the plugin saving arbitrary meta keys under a registered option name without sufficient capability checks or key allowlist / restrictions. This makes it…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise stores the isAdmin flag in remember-me tokens and restores that stale value during automatic login instead of resolving the account's current role from users.txt. A…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing remote command execution IPC frames across the fabric, the receiving switch processes these…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,7 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
The Document Gallery WordPress plugin through 5.1.1 does not sanitise or escape several gallery shortcode attributes before embedding them in a single-quoted HTML attribute in the rendered gallery markup, allowing users with the Contributor role and above to inject arbitrary event handlers that…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
The Salon Booking System WordPress plugin before 10.31.11 does not validate a user-supplied image URL before fetching it server-side and writing the response to a publicly accessible location under an attacker-chosen filename, allowing users with the Salon Staff role or higher to force the server…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Unsanitised input in
the "template name" field of SQLView KRIS's Workflow Template feature
is rendered in "onclick" attributes on the main dashboard without
proper server-side sanitisation, allowing an attacker with administrative
access to inject and store malicious scripts that execute in the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
The Envira Gallery WordPress plugin before 1.16.1 does not sanitise or escape user-supplied gallery display configuration values before storing them and outputting them in an image tag attribute, allowing users with the Author role and above to inject arbitrary web scripts that execute when any…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
The Envira Gallery WordPress plugin before 1.16.1 does not sanitise and escape a gallery item identifier before outputting it in an image tag attribute, allowing users with the Author role and above to inject arbitrary web scripts that execute when any visitor, including an administrator, views a…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
The Horizontal scrolling announcements WordPress plugin through 2.6 does not sanitise and escape one of its announcement settings before outputting it into an attribute context on the front end, allowing users granted access to the announcement management page (Contributor and above, once…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
The Loco Translate WordPress plugin before 2.8.9 does not sanitise and escape some bundle configuration values before outputting them back in an admin page, allowing users with the translator capability and above to perform Stored Cross-Site Scripting attacks against high privilege users such as…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
The Kubio AI Page Builder WordPress plugin before 2.9.3 does not validate the URI scheme of a user-supplied value before outputting it as a link target, allowing users with the contributor role and above to store a payload which executes in the browser of anyone who follows the link, including an…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
An optional, separately licensed repository-connector feature in Kiteworks Core did not neutralize special characters in a user-supplied path before passing it to an external command. An authenticated system administrator could inject additional commands and write arbitrary content to files owned…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,6 · EPSS 1,23 % · rekomendacja wg zapisanej polityki
The Ukr-To-Lat WordPress plugin through 1.3.5 does not sanitize and escape a term name before using it in a SQL query, allowing users with Contributor-level access and above to perform SQL injection attacks.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
The BSK PDF Manager WordPress plugin through 3.8.1 does not properly sanitise and escape a parameter before using it in a SQL statement, which could allow authenticated users with contributor-level access and above to perform SQL injection attacks and read sensitive data such as administrator…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
The Code Snippets WordPress plugin before 3.10.0 does not sanitise and escape a user-supplied parameter before using it in a SQL query in some of its snippet-migration import endpoints, which are accessible to any user holding site-administration capabilities; on a WordPress Multisite network…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can read…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability in Configuration Management, allowing an attacker to execute specifically crafted commands to reveal system secret through error messages.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,23 % · rekomendacja wg zapisanej polityki