Minhtuanact

The issue is related to an Improper Restriction of XML External Entity Reference vulnerability, which allows XML Injection.

The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a Path Traversal vulnerability. This vulnerability allows for Path Traversal in the vlad.olaru Fonto software.

The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows for Path Traversal in the pixelgrade Category Icon.

The issue is related to improper neutralization of input during web page generation, allowing reflected Cross-site Scripting (XSS). This enables attackers to inject malicious scripts into web pages. The problem affects the Tag Cloud plugin of WordPress, specifically the Tag Groups component.

The issue is due to missing or incorrect nonce validation on the 'Viewmedica-Admin' page, making it possible for unauthenticated attackers to inject arbitrary SQL queries via a forged request. This can happen if an attacker can trick a site administrator into performing an action, such as clicking on a link.

The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability that allows Blind SQL Injection. This means an attacker can trick a user into performing unintended actions on a web application, potentially leading to the extraction of sensitive data from the database without the user's knowledge.

Name of the Vulnerable Software and Affected Versions: Persian Woocommerce SMS versions 7.0.5 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting (XSS) vulnerability. This allows for Reflected XSS attacks. Recommendations: For versions 7.0.5 and earlier, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels.

The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels.

The issue is related to a Missing Authorization vulnerability in AlexaCRM Dynamics 365 Integration, which allows exploiting incorrectly configured access control security levels.

The issue is related to an OS Command Injection vulnerability due to improper neutralization of special elements used in an OS command. This allows for OS Command Injection, potentially enabling attackers to execute arbitrary commands on the affected system.

The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability. This vulnerability affects the PluginOps MailChimp Subscribe Form, Optin Builder, PopUp Builder, and Form Builder.

The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting malicious SQL code.

The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting malicious SQL code.

The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability. This vulnerability affects the affiliate-toolkit – WordPress Affiliate Plugin, allowing potential redirection to untrusted sites.

The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability. This vulnerability affects Doofinder WP & WooCommerce Search, allowing redirection to untrusted sites.

The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability. This vulnerability allows an attacker to redirect users to untrusted sites. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability. This vulnerability allows an attacker to redirect users to untrusted sites.

The issue is related to the exposure of sensitive information to an unauthorized actor. This is a problem where sensitive data is made available to individuals who should not have access to it.

The issue is related to an Unauth. Reflected Cross-Site Scripting (XSS) vulnerability. This vulnerability occurs on the 302 response page.