| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-21658 | 4.3 | A Cross-Site Request Forgery (CSRF) in WDJA CMS v1.5.2 allows attackers to arbitrarily add administrator accounts via a crafted URL. | 2021-10-15 17:48:00 | 2021-10-06 22:15:00 |
| CVE-2021-20552 | 4.0 | IBM Sterling File Gateway 6.0.0.0 through 6.1.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. | 2021-10-15 17:33:00 | 2021-10-07 18:15:00 |
| CVE-2020-21654 | 6.5 | emlog v6.0 contains a vulnerability in the component admin\template.php, which allows attackers to getshell via a crafted Zip file. | 2021-10-15 17:31:00 | 2021-10-06 22:15:00 |
| CVE-2021-20561 | 4.3 | IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disc | 2021-10-15 17:25:00 | 2021-10-07 18:15:00 |
| CVE-2021-20571 | 3.5 | IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credent | 2021-10-15 17:04:00 | 2021-10-07 18:15:00 |
| CVE-2021-24712 | 3.5 | The Appointment Hour Booking WordPress plugin before 1.3.17 does not properly sanitize values used when creating new calendars. | 2021-10-15 16:34:00 | 2021-10-11 11:15:00 |
| CVE-2021-24690 | 3.5 | The Chained Quiz WordPress plugin before 1.2.7.2 does not properly sanitize or escape inputs in the plugin's settings. | 2021-10-15 16:33:00 | 2021-10-11 11:15:00 |
| CVE-2021-24545 | 3.5 | The WP HTML Author Bio WordPress plugin through 1.2.0 does not sanitise the HTML allowed in the Bio of users, allowing them to use malicious JavaScript code, which will be executed when anyone visit a post in the frontend made by such user. As a resu | 2021-10-15 16:32:00 | 2021-10-11 11:15:00 |
| CVE-2021-24656 | 3.5 | The Simple Social Media Share Buttons WordPress plugin before 3.2.4 does not escape the Share Title settings before outputting it in the frontend pages or posts (depending on the settings used), allowing high privilege users to perform Cross-Site Scr | 2021-10-15 16:29:00 | 2021-10-11 11:15:00 |
| CVE-2021-24691 | 3.5 | The Quiz And Survey Master WordPress plugin before 7.3.2 does not escape the Quiz Url Slug setting before outputting it in some pages, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capabi | 2021-10-15 16:27:00 | 2021-10-11 11:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: