Sergio Corral Cristo

#12949de 60,596
24.8CVSS total
Vulnerabilidades · 4
Média
4
PT-2023-14670
2023-09-20
6.5
CVE-2022-45447
Prestashop
M4 Pdf Plugin
The issue is related to a directory traversal vulnerability. The `f` parameter is not properly checked in the resource "/m4pdf/pdf.php", allowing an attacker to download any file given its relative path. This could potentially enable an attacker to access sensitive files, such as "/etc/passwd", if they exist on the server.
PT-2023-14671
2023-09-20
6.1
CVE-2022-45448
Prestashop
M4 Pdf Plugin
The M4 PDF plugin for Prestashop sites is vulnerable to an arbitrary HTML Document crafting vulnerability. The resource "/m4pdf/pdf.php" uses templates to dynamically create documents. If the template does not exist, the application returns a fixed document with a message in mpdf format. An attacker could exploit this vulnerability by inputting a valid HTML/CSS document as the value of the `parameter`.
PT-2022-13617
2022-05-09
6.1
CVE-2022-1047
WordPress
Themify Post Type Builder Search Addon
O problema decorre da falha do plugin em escapar adequadamente a URL da página atual antes de reutilizá-la em um atributo HTML, levando a uma vulnerabilidade de cross-site scripting refletido.
PT-2021-16222
2021-10-11
6.1
CVE-2021-24719
Kriesi
Enfold
O tema Enfold para WordPress está afetado por uma vulnerabilidade de Cross-Site Scripting (XSS) refletido. Essa vulnerabilidade está presente nas versões do Enfold que utilizam o Avia Page Builder e são anteriores à versão 4.8.4.