Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown
CVE-2025-23436
Disclosure Date: January 16, 2025 (last updated January 17, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in Capa Wp-Scribd-List allows Stored XSS.This issue affects Wp-Scribd-List: from n/a through 1.2.
0
Attacker Value
Unknown
CVE-2024-51578
Disclosure Date: November 10, 2024 (last updated November 14, 2024)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Luca Paggetti 3D Presentation allows Stored XSS.This issue affects 3D Presentation: from n/a through 1.0.
0
Attacker Value
Unknown
CVE-2022-1832
Disclosure Date: June 20, 2022 (last updated February 23, 2025)
The CaPa Protect WordPress plugin through 0.5.8.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and disable the applied protection.
0
Attacker Value
Unknown
CVE-2020-27977
Disclosure Date: November 09, 2020 (last updated November 28, 2024)
CapaSystems CapaInstaller before 6.0.101 does not properly assign, modify, or check privileges for an actor who attempts to edit registry values, allowing an attacker to escalate privileges.
0
Attacker Value
Unknown
CVE-2013-5216
Disclosure Date: September 12, 2013 (last updated October 05, 2023)
Directory traversal vulnerability in logreader/uploadreader.jsp in CapaSystems Performance Guard before 6.2.102 allows remote attackers to read arbitrary files via unspecified vectors.
0
