Tmrswrr

The software contains a SQL Injection issue due to insufficient escaping of user-supplied input and inadequate preparation of existing SQL queries. Specifically, the `params` parameter is vulnerable. This allows authenticated attackers with Administrator-level access or higher to inject additional SQL queries into existing ones, potentially extracting sensitive information from the database.

Textpattern CMS contains a stored cross-site scripting issue in the article excerpt field. Authenticated users can inject malicious scripts into the excerpt. When an article is viewed by other users, the injected JavaScript payloads will execute.

The WP Directory Kit plugin for WordPress is susceptible to SQL Injection through the `hide fields` and `attr search` parameter. Insufficient input sanitization and inadequate SQL query preparation allow unauthenticated attackers to inject additional SQL queries, potentially extracting sensitive information from the database.

Authenticated administrators can achieve remote code execution by uploading malicious PHP files during the theme installation process. This is possible by uploading a ZIP archive containing a PHP file with system commands, which is then executed when the file is accessed within the theme directory.

Akaunting version 3.1.8 is affected by a server-side template injection issue. Authenticated administrators can inject template expressions into several form input fields, including those for items, taxes, transactions, and vendor names. This allows attackers to perform arithmetic operations and string manipulations by injecting template payloads.

The software contains a stored cross-site scripting issue that allows authenticated attackers to inject malicious scripts into user profile fields. Specifically, attackers can input script payloads into the first name field. This script will execute when a user profile is viewed, potentially leading to session cookie theft and arbitrary JavaScript execution.

An authenticated administrator can inject malicious scripts in forum information fields, leading to a stored cross-site scripting issue. Attackers can insert JavaScript payloads that execute when other users view the forum. This could result in the theft of session cookies and the execution of client-side scripts. The affected functionality involves forum information fields.

The software contains a stored cross-site scripting issue in the admin redirects configuration. Attackers can inject malicious scripts by inserting a payload into the 'Redirect From' field. This allows for the execution of arbitrary JavaScript when administrators view the redirects page.

CE Phoenix version 3.0.1 has a stored cross-site scripting issue within the currencies administration panel. An attacker can inject malicious scripts by inserting XSS payloads into the title field. When administrators view the currencies page, the injected JavaScript will execute. The vulnerability allows for the execution of arbitrary JavaScript.

Loaded Commerce contains a client-side template injection, which occurs when untrusted user input is embedded into a web template, allowing an attacker to inject their own templates. This issue allows unauthenticated attackers to execute arbitrary code in the victim's browser context or on the server via the `search` parameter.

The WP Directory Kit plugin for WordPress is susceptible to SQL Injection through the `search` parameter. This is due to inadequate input sanitization and insufficient preparation of existing SQL queries. An authenticated attacker with Administrator-level access or higher can inject additional SQL queries, potentially extracting sensitive information from the database.

The WP Directory Kit plugin for WordPress is susceptible to SQL Injection through the `columns search` parameter of the `select 2 ajax()` function. Insufficient input sanitization and inadequate SQL query preparation allow unauthenticated attackers to inject additional SQL queries, potentially extracting sensitive information from the database.

The Import any XML, CSV or Excel File to WordPress (WP All Import) plugin for WordPress is susceptible to Remote Code Execution. This is caused by the use of `eval()` on unsanitized user-supplied input within the `pmxi if` function located in `helpers/functions.php`. Authenticated attackers with import capabilities can inject and execute arbitrary PHP code on the server through crafted import templates. This could lead to remote code execution.

The AIO Forms – Craft Complex Forms Easily plugin for WordPress is susceptible to arbitrary file uploads because of a lack of file type validation within the import functionality. This allows authenticated attackers with Administrator-level access or higher to upload arbitrary files to the server, potentially leading to remote code execution.

The software contains a SQL Injection issue due to insufficient escaping of the `order` parameter and inadequate preparation of the SQL query. This allows authenticated attackers with Administrator-level access or higher to append SQL queries, potentially extracting sensitive information from the database. The vulnerable parameter is `order`.

The Multi Step Form plugin for WordPress is susceptible to arbitrary file uploads due to a lack of file type validation during the import process. This allows authenticated attackers with Administrator-level access or higher to upload arbitrary files to the affected server, potentially leading to remote code execution.

The issue is related to a time-based SQL Injection vulnerability via the `orderby` parameter. This vulnerability is caused by insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query. As a result, authenticated attackers with Administrator-level access and above can append additional SQL queries into already existing queries to extract sensitive information from the database.

The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient input sanitization and output escaping. This allows authenticated attackers with administrator-level permissions and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The issue only affects multi-site installations and installations where unfiltered html has been disabled.

The issue is related to time-based SQL Injection via the `orderby` parameter due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query. This allows authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient input sanitization and output escaping. This allows authenticated attackers with administrator-level permissions and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The issue only affects multi-site installations and installations where unfiltered html has been disabled.