Steven Julian

An issue exists that allows for privilege escalation within the application.

A site isolation issue exists within the Graphics component. Site isolation is a security mechanism that ensures web pages from different sites are processed in separate processes to prevent one site from accessing data from another.

A site isolation issue exists within the Graphics component. Site isolation is a security mechanism that ensures web pages from different sites are processed in separate processes to prevent one site from accessing data from another.

A privilege escalation issue exists within the DOM: Navigation component.

An integer overflow exists within the Audio/Video component. An integer overflow occurs when an arithmetic operation attempts to create a numeric value that is outside of the range that can be represented with a given number of bits.

Incorrect boundary conditions exist within the Audio/Video: Playback component.

Authenticated attackers with Contributor-level access and above can extract sensitive user or configuration data from the WordPress plugin.

A missing authorization issue in Benbodhi SVG Support allows for the exploitation of incorrectly configured access control security levels. This is a broken access control flaw where the system fails to properly verify the identity or permissions of a user before granting access to protected resources.

A use-after-free issue in the Disability Access APIs component allows for a sandbox escape. Use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

An authorization issue exists in E2Pdf. The issue involves exploiting incorrectly configured access control security levels. The vulnerability allows unauthorized access.

An information disclosure issue exists in Firefox and Firefox Focus for Android due to uninitialized memory. This can potentially allow an attacker to access sensitive information.

An authorization issue exists in FooPlugins FooGallery. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access.

The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting (XSS). This means that malicious scripts can be injected into web pages viewed by other users. The affected component is `foogallery`.

The software contains a flaw related to improper input handling during web page generation, leading to a DOM-Based Cross-site Scripting (XSS) condition. This allows for potential execution of malicious scripts within the user's browser in the context of the affected web application.

An issue exists due to incorrect boundary conditions within the Graphics: ImageLib component.

The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS attacks.

The issue affects the Avirtum iPanorama 360 WordPress Virtual Tour Builder, allowing access to functionality not properly constrained by Access Control Lists (ACLs). This means that certain features or data may be accessible without the necessary permissions.

The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels.

The issue affects the Soliloquy Team Slider, allowing Cross-Site Scripting (XSS) due to Improper Neutralization of Input During Web Page Generation and Improper Authentication vulnerability.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS in bPlugins StreamCast.