Mcdruid

Insufficient sanitization of AI-generated documentation summaries and improper output escaping allow unauthenticated users to perform prompt injection. This enables the storage of malicious payloads that execute in the browser of any visitor viewing the affected page, including administrators. This issue results in Stored Cross-Site Scripting (XSS), a technique where a malicious script is permanently stored on the target server.

An unauthenticated broken access control issue exists, allowing unauthorized users to bypass access restrictions.

Authenticated users can perform OS Command Injection when the software processes image operations. This occurs because a parameter is not properly escaped before being passed to a shell command. This issue is exploitable if the server has the ImageMagick convert CLI available and lacks both the PHP imagick and GD extensions.

Unauthenticated attackers can perform PHP Object Injection through the deserialization of untrusted data. This issue occurs when the software fails to properly validate input before passing it to a deserialization function. While no POP chain (a sequence of gadgets used to execute malicious code during deserialization) is present within the software itself, the impact depends on other installed plugins or themes. If a POP chain exists in another component, an attacker could delete arbitrary files, retrieve sensitive data, or execute code.

Insufficient sanitization of user input used in a SQL statement allows unauthenticated attackers to perform SQL injection attacks.

An issue exists in the resize command where the `bg` (background color) parameter is accepted from user input and passed through image resize or rotate processing. In configurations utilizing the ImageMagick CLI backend, this value is incorporated into shell command strings without sufficient escaping, allowing an attacker to achieve arbitrary command execution as the web server process user.

Unauthenticated Cross Site Scripting (XSS) allows an attacker to execute malicious scripts in the victim's browser without requiring authentication.

An issue exists where a parameter is not sanitized or escaped before being used in a SQL statement. This allows unauthenticated users to perform SQL injection attacks, which involve inserting malicious SQL code into a query to manipulate the database.

A code injection issue exists in the Widget Options component. This allows for the injection of code. The issue is related to improper control of code generation.

The software contains a flaw related to the inclusion of functionality from an untrusted control sphere, potentially allowing access to functionality not properly constrained by access control lists (ACLs).

A flaw exists in wpdevelop Booking Calendar that allows for Blind SQL Injection due to improper neutralization of special elements used in an SQL command. This issue could potentially allow an attacker to extract sensitive information from the database.

A code injection issue exists in Mohammad I. Okfie IF AS Shortcode. The flaw allows for code injection, potentially enabling attackers to execute malicious code. The affected component is the IF AS Shortcode.

The s2Member plugin for WordPress contains a code injection flaw that allows unauthenticated attackers to achieve remote code execution on the server. This occurs due to improper control of the generation of code.

A flaw exists in raoinfotech GSheets Connector that allows for Object Injection due to deserialization of untrusted data. This issue impacts the application's ability to securely handle incoming data, potentially leading to unauthorized access or control. The vulnerability is related to the deserialization process, where untrusted data is converted into an object, potentially allowing an attacker to manipulate the application's state.

The software contains a flaw due to deserialization of untrusted data, which allows for object injection.

The ConveyThis Language Translate Widget for WordPress is susceptible to deserialization of untrusted data, which allows for object injection. This issue could potentially allow an attacker to compromise the system by manipulating serialized data.

A deserialization of untrusted data issue exists in eDS Responsive Menu, allowing object injection. This can occur due to the deserialization of untrusted data.

A deserialization issue exists in Rubel Miah Aitasi Coming Soon, potentially allowing for object injection. This occurs due to the deserialization of untrusted data.

Deserialization of untrusted data in LTL Freight Quotes - TQL Edition allows for object injection.

A deserialization of untrusted data issue exists in enituretechnology LTL Freight Quotes – Daylight Edition, allowing object injection.