Nguyen Xuan Chien

The software contains a flaw related to improper control of filename for include/require statements, potentially leading to PHP Local File Inclusion. The issue affects the wpDataTables component.

A Cross-Site Request Forgery (CSRF) issue exists in Zoho ZeptoMail, also allowing for Stored Cross-Site Scripting (XSS). The issue impacts the way requests are handled, potentially allowing an attacker to perform actions on behalf of an authenticated user without their knowledge.

The software contains a flaw related to improper control of filenames used in include/require statements, specifically a PHP Remote File Inclusion issue. This allows for PHP Local File Inclusion.

The software contains a flaw related to improper input handling during web page creation, which allows for Reflected Cross-Site Scripting (XSS). This means an attacker could potentially inject malicious scripts into a web page viewed by other users. The affected component is susceptible to exploitation through crafted input.

A flaw exists in INVELITY Invelity SPS connect that allows for Reflected Cross-Site Scripting (XSS). This occurs due to improper neutralization of input during web page generation. The issue allows an attacker to inject malicious scripts into web pages viewed by other users. The vulnerable component is susceptible to exploitation through crafted input.

The software contains a flaw related to improper input handling during web page generation, specifically a Reflected Cross-site Scripting issue. This allows for the execution of malicious scripts through crafted input. The vulnerable component is susceptible to attacks where an attacker can inject malicious code into a web page viewed by other users. The affected API endpoint is not specified. The vulnerable parameter is not specified. The vulnerable function is not specified.

The software contains a flaw related to improper control of filenames used in include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusion of local files.

The Codeaffairs Wp Text Slider Widget contains a flaw related to improper input handling during web page creation, specifically a Stored Cross-site Scripting issue. This allows for the injection of malicious scripts. The issue impacts the application by allowing an attacker to execute arbitrary code within the context of a user's browser. The vulnerability affects the application through the use of vulnerable parameters and API endpoints. The vulnerable parameters are not specified.

A flaw exists in BoldGrid Sprout Clients that allows for Reflected Cross-site Scripting (XSS). This issue arises from improper input validation during web page generation. The vulnerability affects the `sprout-clients` component.

Name of the Vulnerable Software and Affected Versions: WooCommerce Booking Bundle Hours versions through 0.7.4 Description: A Cross-Site Request Forgery (CSRF) vulnerability exists in Cristiano Zanca WooCommerce Booking Bundle Hours, which can lead to Stored Cross-Site Scripting (XSS). Recommendations: Update WooCommerce Booking Bundle Hours to a version later than 0.7.4.

A Cross-Site Request Forgery (CSRF) vulnerability exists in aakash1911 WP likes, which also allows Reflected Cross-Site Scripting (XSS).

The software contains a Cross-Site Request Forgery (CSRF) flaw. This issue allows attackers to perform actions on behalf of authenticated users.

A Cross-Site Request Forgery (CSRF) vulnerability exists in To Lead For Salesforce, which also allows Reflected Cross-Site Scripting (XSS).

A Cross-Site Request Forgery (CSRF) vulnerability exists in Yaidier WN Flipbox Pro, which also allows Reflected Cross-Site Scripting (XSS).

A missing authorization issue exists in Payoneer Checkout, which allows content spoofing.

A Cross-Site Request Forgery (CSRF) vulnerability exists in David Merinas Auto Last Youtube Video, which also allows Stored Cross-Site Scripting (XSS).

A Cross-Site Request Forgery (CSRF) vulnerability exists in Deepak S Hide Real Download Path, which can also lead to Stored Cross-Site Scripting (XSS).

The software contains a Cross-Site Request Forgery (CSRF) flaw. This issue allows attackers to perform actions on behalf of authenticated users.

KCS Responder is susceptible to a Cross-Site Request Forgery (CSRF) issue, which allows attackers to perform actions on behalf of authenticated users.

A Cross-Site Request Forgery (CSRF) issue exists in the TrustMate.io – WooCommerce integration. This allows attackers to potentially perform actions on behalf of an authenticated user without their knowledge.