CVE Vulnerability Catalog

The Bit Integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress in all versions up to and including 2.10.6 is vulnerable to Stored Cross-Site Scripting via the field mapped to notification_content (attacker-chosen key, e.g. payload_text) due to insufficient input sanitization and output escaping. Exploitation requires a site administrator to have preconfigured a Bit Integrations flow binding the public Bit Assist webhook to a BuddyBoss "Send Notification" action with a form field mapped to notification_content, and the attacker to know the flow's UUID callback URL.

Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9 before 1.10.4 (TSW and SWM devices) allows a remote authenticated attacker to execute arbitrary OS commands.

Polaris Office App version 9.9.19 on Android has a path traversal vulnerability in the function com.infraware.service.m.n.a of the Document Intake component, triggered by manipulation of the _display_name argument. The attack requires local access.

A security flaw has been discovered in SourceCodester Library Management System 1.0 affecting the move_uploaded_file function in admin/add_admin.php. Manipulation of the image argument results in unrestricted upload. The attack may be initiated remotely and the exploit has been released to the public.

A vulnerability was identified in SourceCodester E-Learning System 1.0 affecting the save_users function in /classes/Users.php?f=save. Manipulation of the img argument leads to unrestricted upload. The attack can be launched remotely and the exploit is publicly available.

A vulnerability was determined in SourceCodester Contact Tracing System 1.0 affecting the move_uploaded_file function in /classes/Users.php?f=save. Manipulation of the img/id argument causes unrestricted upload. The attack can be initiated remotely and the exploit has been publicly disclosed.

The macOS version of the DigiD app is not signed with Hardened Runtime. This allows a local process to load its own dylib into DigiD via DYLD_INSERT_LIBRARIES. An attacker with local user-level code execution can execute arbitrary code within the app, gaining access to DigiD data and cryptographic capabilities.

The WP-BusinessDirectory WordPress plugin through 4.0.2 does not restrict the type or destination of files saved by an unauthenticated upload handler, allowing unauthenticated attackers to write files with arbitrary content to arbitrary locations, though not to execute code on a default server configuration.

The WP Testimonials WordPress plugin through 1.4.13 does not properly escape testimonial content and reverses WordPress's HTML sanitization when rendering it, allowing users with the Author role and above to store JavaScript that executes in the session of any user viewing the testimonials, including administrators.

The Weaver Xtreme Theme Support plugin for WordPress has a Stored XSS vulnerability. This affects all versions from n/a through 7.0.1.

The IMPress for IDX Broker plugin for WordPress has a Stored XSS vulnerability. This affects all versions from n/a through 3.3.1.

The FV Simpler SEO plugin for WordPress has a Stored XSS vulnerability. This affects all versions from n/a through 1.9.7.

The Responsive Slider plugin for WordPress has a Stored XSS vulnerability. This affects all versions from n/a through 0.1.9.

A vulnerability was found in SourceCodester Human Resource Management System 1.0 in the session_start function of controller/employee.php in the Employee Endpoint component. Manipulation of role/pfimg/EmpId arguments leads to improper authentication. The attack can be launched remotely and the exploit is public.

A flaw has been found in D-Link DCS-930L B1.08B4 affecting the mpfd_decode function in bootloader_region.bin of the Emergency HTTP Recovery Server component. Manipulating the firmware argument leads to improper verification of the cryptographic signature. The attack can be performed remotely and the exploit has been published.

A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449 in the MySQLDB::addNewUser function of include/database.php in the Registration Form component. Manipulation of the branch argument results in SQL injection. The attack is remotely possible and the exploit is public. The project has not responded.

A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449 in the Session::checkLogin function of include/session.php in the Session Handler component. Manipulation of cookname/cookid arguments leads to incorrect comparison. The attack can be executed remotely and the exploit is public. The project has not responded.

SourceCodester Performance Indicator System 1.0 contains a SQL injection vulnerability in the file /opils/staff/sales_history.php. Manipulation of the ID argument leads to SQL injection. The attack can be performed remotely, and the exploit has been publicly released.

SourceCodester Performance Indicator System 1.0 contains a SQL injection vulnerability in the file /opils/staff/edit_credit.php. Manipulation of the credit argument leads to SQL injection. The attack can be performed remotely, and the exploit has been publicly released.

A SQL injection vulnerability was identified in SourceCodester Performance Indicator System 1.0 in the file /opils/staff/product.php. Manipulation of the Category argument allows remote attack. The exploit is publicly available.