Re-Alter

The issue affects the JS Help Desk – Best Help Desk & Support Plugin, allowing exploitation of incorrectly configured access control security levels due to a missing authorization vulnerability. This vulnerability enables unauthenticated settings changes.

The issue affects the JS Help Desk plugin, allowing exploitation of incorrectly configured access control security levels due to a missing authorization vulnerability. This vulnerability exploits broken access control, potentially risking unauthorized access.

The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels.

The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs.

The issue is a Cross-Site Request Forgery (CSRF) vulnerability that allows Cross Site Request Forgery. This problem involves CSRF attacks.

The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the Cooked Pro software. This allows for the upload of files with potentially dangerous types without proper restrictions.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS, where an attacker can inject malicious scripts into a website, potentially affecting users who access the compromised page.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS attacks.

اسم البرنامج المعرض للخطر والإصدارات المتأثرة: إصدارات Blocksy 2.0.22 والإصدارات الأقدم الوصف: تسمح ثغرة أمنية من نوع «تزوير الطلبات بين المواقع» (CSRF) بتنفيذ إجراءات غير مصرح بها نيابة عن المستخدم. ويمكن للمهاجم استغلال هذه الثغرة لتنفيذ إجراءات دون علم المستخدم أو موافقته. تؤثر هذه المشكلة على برنامج Blocksy، مما يسمح بحدوث هجمات تزوير الطلبات بين المواقع (CSRF). التوصيات: بالنسبة للإصدارات 2.0.22 والإصدارات الأقدم، قم بالتحديث إلى إصدار أحدث من 2.0.22 لحل المشكلة. في الوقت الحالي، لا توجد معلومات حول تدابير تخفيف إضافية لهذه المشكلة.

The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which allows PHP Local File Inclusion in the Adifier System. This can potentially lead to unauthorized access to sensitive files.

The issue affects the xtemos WoodMart, allowing for Cross-Site Scripting (XSS) due to improper authentication and neutralization of input during web page generation.

A Cross-Site Request Forgery (CSRF) issue affects the PeproDev CF7 Database, allowing unauthorized actions to be performed on behalf of a user without their knowledge or consent.

The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as a SQL Injection vulnerability. This allows for potential exploitation by injecting malicious SQL code.

The issue is a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.

The issue is a Cross-Site Request Forgery (CSRF) vulnerability in CreativeThemes Blocksy Companion. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can inject malicious scripts into the website, potentially leading to unauthorized actions.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS), which allows Reflected XSS. This means that an attacker can inject malicious code into a website, potentially stealing user data or taking control of the user's session. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

A Cross-Site Request Forgery (CSRF) issue affects several KlbTheme products. This issue allows for malicious requests to be made on behalf of the user without their knowledge or consent.

The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into the website, potentially affecting users who access the compromised page.

The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting (XSS). This means that an attacker can inject malicious scripts into the website, potentially leading to unauthorized access or other malicious activities.