Show filters
9 Total Results
Displaying 1-9 of 9
Sort by:
Attacker Value
Unknown
CVE-2024-10629
Disclosure Date: November 13, 2024 (last updated January 06, 2025)
The GPX Viewer plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check and file type validation in the gpxv_file_upload() function in all versions up to, and including, 2.2.8. This makes it possible for authenticated attackers, with subscriber-level access and above, to create arbitrary files on the affected site's server which may make remote code execution possible.
0
Attacker Value
Unknown
CVE-2024-37553
Disclosure Date: July 06, 2024 (last updated July 13, 2024)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Axelerant Testimonials Widget allows Stored XSS.This issue affects Testimonials Widget: from n/a through 4.0.4.
0
Attacker Value
Unknown
CVE-2024-4705
Disclosure Date: June 06, 2024 (last updated November 21, 2024)
The Testimonials Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's testimonials shortcode in all versions up to, and including, 4.0.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
0
Attacker Value
Unknown
CVE-2022-25138
Disclosure Date: March 03, 2022 (last updated October 07, 2023)
Axelor Open Suite v5.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Name parameter.
0
Attacker Value
Unknown
CVE-2021-24136
Disclosure Date: March 18, 2021 (last updated February 22, 2025)
Unvalidated input and lack of output encoding in the Testimonials Widget WordPress plugin, versions before 4.0.0, lead to multiple Cross-Site Scripting vulnerabilities, allowing remote attackers to inject arbitrary JavaScript code or HTML via the below parameters: - Author - Job Title - Location - Company - Email - URL
0
Attacker Value
Unknown
CVE-2020-13614
Disclosure Date: May 26, 2020 (last updated February 21, 2025)
An issue was discovered in ssl.c in Axel before 2.17.8. The TLS implementation lacks hostname verification.
0
Attacker Value
Unknown
CVE-2013-5570
Disclosure Date: August 23, 2013 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the Javascript and CSS Optimizer extension before 1.1.14 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2008-6050
Disclosure Date: February 04, 2009 (last updated October 04, 2023)
SQL injection vulnerability in the Tech Articles (com_tech_article) 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the item parameter to index.php.
0
Attacker Value
Unknown
CVE-2005-0390
Disclosure Date: May 02, 2005 (last updated February 22, 2025)
Buffer overflow in the HTTP redirection capability in conn.c for Axel before 1.0b may allow remote attackers to execute arbitrary code.
0
