Majed Refaea

The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels.

The issue is related to an Access Control vulnerability in the User Rights Access Manager. This vulnerability allows unauthorized access.

The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels.

The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs.

The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels.

The issue is related to a Missing Authorization vulnerability, which involves exploiting incorrectly configured access control security levels. It also includes a Stored XSS vulnerability.

The issue is related to a Missing Authorization vulnerability, allowing the exploitation of incorrectly configured access control security levels.

The issue is related to missing authorization, allowing exploitation due to incorrectly configured access control security levels.

The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels.

The issue is a Cross-Site Request Forgery (CSRF) vulnerability that allows Cross-Site Scripting (XSS) in the MyBookTable Bookstore plugin for WordPress. Users are advised to upgrade to the latest version to mitigate risks.

The issue affects Zoho Campaigns, allowing Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This enables an attacker to inject malicious scripts into web pages.

The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability that also allows Cross-Site Scripting (XSS).

The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which allows for Path Traversal and Server Side Request Forgery. This enables unauthorized access to files and directories outside the intended restricted directory.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS attacks.

The issue is a Server-Side Request Forgery (SSRF) vulnerability. This means an attacker can potentially trick the server into making unauthorized requests, leading to various security issues.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Reflected XSS.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS) or Stored XSS. This allows for the storage of malicious scripts in the web application, which can then be executed by other users.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS attacks.

The issue is related to a Server-Side Request Forgery (SSRF) vulnerability. This means an attacker could potentially force the server to make unintended requests, leading to various security issues.

اسم البرنامج المعرض للخطر والإصدارات المتأثرة: Marco Milesi Telegram Bot & Channel، الإصدارات من غير متوفر حتى 3.8.2 الوصف: المشكلة هي ثغرة أمنية من نوع تزوير الطلبات عبر المواقع (CSRF)، والتي تسمح بتنفيذ هجمات تزوير الطلبات عبر المواقع. وهذا يعني أن المهاجم يمكنه حث المستخدم على القيام بأعمال غير مقصودة في تطبيق ويب يكون المستخدم قد قام بتسجيل الدخول إليه. التوصيات: بالنسبة للإصدارات من n/a حتى 3.8.2، قم بالتحديث إلى إصدار يحتوي على تصحيح لهذه المشكلة، حيث لا تتوفر أي إجراءات تخفيف محددة لهذه الإصدارات. في الوقت الحالي، لا توجد معلومات حول إصدار أحدث يحتوي على تصحيح لهذه الثغرة الأمنية.