ProcessMaker 3.5.4 contains a local file inclusion vulnerability that allows unauthenticated...
CVE-2021-47978
ProcessMaker 3.5.4 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary
#severity:medium
共收录 5624 条相关情报。
← 返回所有主题MyBB Timeline Plugin 1.0 contains cross-site scripting vulnerabilities that allow attackers to...
CVE-2021-47934
MyBB Timeline Plugin 1.0 contains cross-site scripting vulnerabilities that allow attackers to inject malicious scripts
WordPress Theme Wibar 1.1.8 contains a stored cross-site scripting vulnerability in the Brand...
CVE-2020-37235
WordPress Theme Wibar 1.1.8 contains a stored cross-site scripting vulnerability in the Brand component that allows auth
CMS Made Simple 2.2.15 contains a stored cross-site scripting vulnerability that allows...
CVE-2020-37238
CMS Made Simple 2.2.15 contains a stored cross-site scripting vulnerability that allows authenticated users with Content
NewsLister contains an authenticated persistent cross-site scripting vulnerability that allows...
CVE-2020-37236
NewsLister contains an authenticated persistent cross-site scripting vulnerability that allows authenticated administrat
WordPress Plugin Buddypress 6.2.0 contains a persistent cross-site scripting vulnerability that...
CVE-2020-37233
WordPress Plugin Buddypress 6.2.0 contains a persistent cross-site scripting vulnerability that allows authenticated att
Composr CMS 10.0.34 contains a persistent cross-site scripting vulnerability that allows...
CVE-2020-37237
Composr CMS 10.0.34 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to
Internet Download Manager 6.38.12 contains a buffer overflow vulnerability in the Scheduler...
CVE-2020-37234
Internet Download Manager 6.38.12 contains a buffer overflow vulnerability in the Scheduler component that allows local
Queue Management System 4.0.0 contains a stored cross-site scripting vulnerability that allows...
CVE-2020-37240
Queue Management System 4.0.0 contains a stored cross-site scripting vulnerability that allows authenticated administrat
The Multicollab: Content Team Collaboration and Editorial Workflow plugin for WordPress is...
CVE-2025-4202
The Multicollab: Content Team Collaboration and Editorial Workflow plugin for WordPress is vulnerable to unauthorized mo
The Essential Chat Support plugin for WordPress is vulnerable to authorization bypass in all...
CVE-2026-8681
The Essential Chat Support plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includi
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 Fail to validate the...
CVE-2026-4054
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 Fail to validate the response body of proxie
phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in FAQ creation and...
CVE-2026-46363
phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in FAQ creation and update endpoints that byp
PHP Timeclock 1.04 contains multiple cross-site scripting vulnerabilities that allow...
CVE-2021-47967
PHP Timeclock 1.04 contains multiple cross-site scripting vulnerabilities that allow unauthenticated attackers to inject
phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in search.twig where...
CVE-2026-46361
phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in search.twig where result.question and resu
Savsoft Quiz 5.0 contains a persistent cross-site scripting vulnerability in the user account...
CVE-2021-47962
Savsoft Quiz 5.0 contains a persistent cross-site scripting vulnerability in the user account settings page that allows
phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in SvgSanitizer:...
CVE-2026-46360
phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in SvgSanitizer::decodeAllEntities() that lim
phpMyFAQ before 4.1.2 contains an authorization bypass vulnerability in...
CVE-2026-46362
phpMyFAQ before 4.1.2 contains an authorization bypass vulnerability in AbstractAdministrationController::userHasPermiss
phpMyFAQ before 4.1.2 contains a path traversal vulnerability in Client::deleteClientFolder that...
CVE-2026-45008
phpMyFAQ before 4.1.2 contains a path traversal vulnerability in Client::deleteClientFolder that allows admins with INST
phpMyFAQ before 4.1.2 contains missing permission checks in ConfigurationTabController.php where...
CVE-2026-45007
phpMyFAQ before 4.1.2 contains missing permission checks in ConfigurationTabController.php where 12 endpoints use userIs