Show filters
30 Total Results
Displaying 1-10 of 30
Sort by:
Attacker Value
Unknown
CVE-2024-11199
Disclosure Date: November 23, 2024 (last updated January 05, 2025)
The Rescue Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's rescue_progressbar shortcode in all versions up to, and including, 2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
0
Attacker Value
Unknown
CVE-2024-9696
Disclosure Date: October 12, 2024 (last updated January 05, 2025)
The Rescue Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rescue_tab' shortcode in all versions up to, and including, 2.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
0
Attacker Value
Unknown
CVE-2023-41728
Disclosure Date: October 02, 2023 (last updated April 29, 2024)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rescue Themes Rescue Shortcodes allows Stored XSS.This issue affects Rescue Shortcodes: from n/a through 2.5.
0
Attacker Value
Unknown
CVE-2022-31941
Disclosure Date: June 17, 2022 (last updated February 23, 2025)
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via \rdms\admin?page=user\manage_user&id=.
0
Attacker Value
Unknown
CVE-2022-31965
Disclosure Date: June 02, 2022 (last updated February 23, 2025)
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/respondent_types/manage_respondent_type.php?id=.
0
Attacker Value
Unknown
CVE-2022-31964
Disclosure Date: June 02, 2022 (last updated February 23, 2025)
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via rdms/admin/respondent_types/view_respondent_type.php?id=.
0
Attacker Value
Unknown
CVE-2022-31962
Disclosure Date: June 02, 2022 (last updated February 23, 2025)
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidents/view_incident.php?id=.
0
Attacker Value
Unknown
CVE-2022-31961
Disclosure Date: June 02, 2022 (last updated February 23, 2025)
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidents/manage_incident.php?id=.
0
Attacker Value
Unknown
CVE-2022-31959
Disclosure Date: June 02, 2022 (last updated February 23, 2025)
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/teams/manage_team.php?id=.
0
Attacker Value
Unknown
CVE-2022-31957
Disclosure Date: June 02, 2022 (last updated February 23, 2025)
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via rdms/admin/teams/view_team.php?id=.
0
