Savphill

The software is subject to content injection within the Shop manager component.

The software contains a flaw related to improper input handling during web page generation, specifically a Stored Cross-site Scripting issue. This impacts the `page-builder-add` component. The issue allows for the injection of malicious scripts.

The software contains a flaw due to improper handling of user-supplied data when creating web pages, leading to a potential Cross-site Scripting (XSS) issue. This allows for the injection of malicious scripts into web pages viewed by other users. The issue is a Stored XSS, meaning the malicious script is permanently stored on the target server.

The Colibri Page Builder software contains a flaw related to improper input handling during web page generation, which can lead to Cross-site Scripting (XSS). This allows for the injection of malicious scripts into web pages. The issue is identified as Stored XSS, meaning the malicious script is persistently stored on the target server.

A flaw exists in Automattic WordPress that allows for Stored Cross-site Scripting (XSS). An attacker with Author or higher user privileges can exploit this issue. The vulnerability stems from improper neutralization of input during web page generation.

Name of the Vulnerable Software and Affected Versions: Blocksy versions through 2.1.6 Description: Improper neutralization of input during web page generation allows for Stored Cross-Site Scripting (XSS). Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject malicious scripts into the website, potentially affecting users who access the compromised page.

The issue is related to an Unrestricted Upload of File with Dangerous Type, allowing the use of malicious files. This can potentially lead to remote code execution (RCE) exploits.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject malicious scripts into the website, potentially affecting users who access the compromised page.

The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows authenticated attackers with Author-level access and above to inject arbitrary web scripts in pages via the `table-name` parameter. These scripts will execute whenever a user accesses an injected page.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables an attacker to inject malicious scripts into the website, potentially affecting user sessions.

The issue is related to a Missing Authorization vulnerability in the EmbedPress Document Block – Upload & Embed Docs. This vulnerability affects the ability to properly authorize access, potentially leading to unauthorized actions.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject malicious scripts into the website, potentially affecting users who access the compromised page.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks.

The issue is related to improper neutralization of input during web page generation, allowing stored Cross-site Scripting (XSS) attacks. This affects WooCommerce PDF Invoices, Packing Slips, Delivery Notes, and Shipping Labels.

The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting (XSS). This means that an attacker can inject malicious scripts into the website, potentially leading to unauthorized access or control. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited.

The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting (XSS). This means an attacker can inject malicious scripts into the website, potentially affecting users who access the compromised pages. The estimated number of potentially affected devices worldwide is not available. There is no information provided about real-world incidents where this issue was exploited.

The issue allows for the insertion of sensitive information into externally-accessible files or directories, exploiting incorrectly configured access control security levels.

The issue allows the retrieval of embedded sensitive data due to the insertion of sensitive information into log files.