v3xx

The issue affects the JS Help Desk – Best Help Desk & Support Plugin, allowing exploitation of incorrectly configured access control security levels due to a missing authorization vulnerability. This vulnerability enables unauthenticated settings changes.

The issue affects the JS Help Desk plugin, allowing exploitation of incorrectly configured access control security levels due to a missing authorization vulnerability. This vulnerability exploits broken access control, potentially risking unauthorized access.

The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels.

The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs.

The issue is a Cross-Site Request Forgery (CSRF) vulnerability that allows Cross Site Request Forgery. This problem involves CSRF attacks.

The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the Cooked Pro software. This allows for the upload of files with potentially dangerous types without proper restrictions.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS, where an attacker can inject malicious scripts into a website, potentially affecting users who access the compromised page.

The issue is related to Persistent Cross-Site Scripting (XSS) via the `[cooked-timer]` shortcode due to insufficient input sanitization and output escaping. This allows authenticated attackers with subscriber-level access and above to inject arbitrary web scripts in pages that will execute whenever a user accesses a compromised page.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS attacks.

The issue is related to Cross-Site Request Forgery (CSRF) due to missing or incorrect nonce validation on the AJAX action handler. This could allow an attacker to trick users into performing unintended actions under their current authentication. The problem has been addressed in release version 1.8.0.

The issue is related to Cross-Site Request Forgery (CSRF) due to missing or incorrect nonce validation on the AJAX action handler. This could allow an attacker to trick users into performing unintended actions under their current authentication. The problem has been addressed in release version 1.8.0.

The issue is related to Cross-Site Request Forgery (CSRF) due to missing or incorrect nonce validation on the AJAX action handler. This could allow an attacker to trick users into performing unintended actions under their current authentication.

The Cooked plugin for WordPress is vulnerable to HTML Injection due to insufficient input sanitization and output escaping. This issue allows authenticated attackers with contributor-level access and above to inject arbitrary HTML in pages that will be shown whenever a user accesses a compromised page.

The Cooked plugin for WordPress is affected by a Cross-Site Request Forgery (CSRF) issue due to missing or incorrect nonce validation on the AJAX action handler. This could allow an attacker to trick users into performing unintended actions under their current authentication.

Name of the Vulnerable Software and Affected Versions: Blocksy versions 2.0.22 and earlier Description: A Cross-Site Request Forgery (CSRF) issue allows unauthorized actions to be performed on behalf of a user. This can be exploited by an attacker to perform actions without the user's knowledge or consent. The issue affects the Blocksy software, allowing for Cross-Site Request Forgery. Recommendations: For versions 2.0.22 and earlier, update to a version later than 2.0.22 to resolve the issue. At the moment, there is no information about additional mitigation measures for this issue.

The issue is related to Reflected Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts in pages via the `attra-color`, `attra-size`, and `product-cata` parameters. Attackers can exploit this by tricking a user into performing an action such as clicking on a link.

The issue is related to Persistent Cross-Site Scripting (XSS) via the ` recipe settings[post title]` parameter due to insufficient input sanitization and output escaping. This allows authenticated attackers with contributor-level access and above to inject arbitrary web scripts in pages that will execute whenever a user accesses a compromised page.

The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which allows PHP Local File Inclusion in the Adifier System. This can potentially lead to unauthorized access to sensitive files.

The issue affects the xtemos WoodMart, allowing for Cross-Site Scripting (XSS) due to improper authentication and neutralization of input during web page generation.

A Cross-Site Request Forgery (CSRF) issue affects the PeproDev CF7 Database, allowing unauthorized actions to be performed on behalf of a user without their knowledge or consent.