Majed Refaea

The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels.

The issue is related to an Access Control vulnerability in the User Rights Access Manager. This vulnerability allows unauthorized access.

The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels.

The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs.

The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels.

The issue is related to a Missing Authorization vulnerability, which involves exploiting incorrectly configured access control security levels. It also includes a Stored XSS vulnerability.

The issue is related to a Missing Authorization vulnerability, allowing the exploitation of incorrectly configured access control security levels.

The issue is related to missing authorization, allowing exploitation due to incorrectly configured access control security levels.

The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels.

The issue is a Cross-Site Request Forgery (CSRF) vulnerability that allows Cross-Site Scripting (XSS) in the MyBookTable Bookstore plugin for WordPress. Users are advised to upgrade to the latest version to mitigate risks.

The issue affects Zoho Campaigns, allowing Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This enables an attacker to inject malicious scripts into web pages.

The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability that also allows Cross-Site Scripting (XSS).

The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which allows for Path Traversal and Server Side Request Forgery. This enables unauthorized access to files and directories outside the intended restricted directory.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS attacks.

The issue is a Server-Side Request Forgery (SSRF) vulnerability. This means an attacker can potentially trick the server into making unauthorized requests, leading to various security issues.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Reflected XSS.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS) or Stored XSS. This allows for the storage of malicious scripts in the web application, which can then be executed by other users.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS attacks.

The issue is related to a Server-Side Request Forgery (SSRF) vulnerability. This means an attacker could potentially force the server to make unintended requests, leading to various security issues.

Name of the Vulnerable Software and Affected Versions: Marco Milesi Telegram Bot & Channel versions n/a through 3.8.2 Description: The issue is a Cross-Site Request Forgery (CSRF) vulnerability, which allows for Cross Site Request Forgery. This means an attacker can trick a user into performing unintended actions on a web application that the user is authenticated to. Recommendations: For versions n/a through 3.8.2, update to a version that contains a fix for this issue, as no specific mitigation measures are provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.