MEDIUM Severity CVEs

The RTMKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Advanced Heading widget's 'Backgrou

libcurl might in some circumstances reuse the wrong connection when asked to do Negotiate-authenticated ones, even when

The JSON API User plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter of the p

The MotoPress Appointment Booking plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key

The CM Business Directory – Optimise and showcase local business plugin for WordPress is vulnerable to Stored Cross-Site

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi

The Ninja Forms - File Uploads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and inc

The WP Import Export Lite plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to and in

The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to generic SQL Injection via

The weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot plugin for WordPress is vulnerable to Stor

The weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot plugin for WordPress is vulnerable to Stor

The weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot plugin for WordPress is vulnerable to Miss

The Azure Blob Storage container used for Gardyn device logs is publicly listable without authentication. A malicious us

The admin panel lacks standard security headers, enabling clickjacking and cross-site scripting attacks.

In exception circumstances, WatchGuard Fireware OS on a FireCluster may use a hard-coded encryption key to encrypt saved

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard

An authenticated administrator can trigger a denial-of-service condition in the Fireware Management Web UI by sending ma

Improper access control in Azure Synapse allows an authorized attacker to elevate privileges over a network.

Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of s

Forgejo before 15.0.3 contains a stored cross-site scripting vulnerability that allows authenticated attackers to execut

AutoBangumi before 3.2.8 contains a server-side request forgery (SSRF) vulnerability that allows unauthenticated remote

LobeChat through 2.2.9 contains a broken object level authorization vulnerability that allows authenticated attackers to

LobeChat through 2.2.9 contains a broken access control vulnerability in the retrieval-augmented-generation semantic sea

Taiga before 6.10.2 contains a missing authorization vulnerability that allows unauthenticated remote attackers to creat

LobeChat through 2.2.9 server-database deployments are vulnerable to broken object-level authorization in MessageModel.

RAGFlow before 0.26.3 stores an agent pipeline (DSL) node name without sanitization: the agent update endpoint normalize

LobeChat before version 2.2.10-canary.15 contains a regular expression denial of service (ReDoS) vulnerability that allo

A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the read_layer_block() function whe

Netdata before 2.3.1 reflects the user-supplied love query parameter of the api/v2/ilove.svg and api/v3/ilove.svg endpoi

Time-of-check Time-of-use (TOCTOU) race condition vulnerability in Erlang/OTP ssl (dtls_packet_demux module) allows an u

Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl (DTLS server) allows predictable DTLS cookie computatio

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an auth

Observable Response Discrepancy vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an authenticated SFTP user to

A NULL pointer dereference vulnerability for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a local attacker to c

PraisonAI before 0.1.7 fails to validate that project_id in issue create and update request bodies belongs to the URL wo

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber ​​Defens

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber ​​Defens

Contributor Cross Site Scripting (XSS) in Surbma | Yoast SEO Breadcrumb Shortcode <= 1.2 versions.

Contributor Cross Site Scripting (XSS) in Structured Content <= 1.7.0 versions.

Author Cross Site Scripting (XSS) in Simple URLs <= 151 versions.

Missing Authorization vulnerability in Sendcloud Sendcloud Shipping allows Exploiting Incorrectly Configured Access Cont

Contributor Cross Site Scripting (XSS) in Mosaic Gallery &#8211; Advanced Gallery <= 1.2.0 versions.

Contributor Cross Site Scripting (XSS) in Livemesh Addons for WPBakery Page Builder <= 3.9.4 versions.

Unauthenticated Sensitive Data Exposure in Kit (formerly ConvertKit) for WooCommerce <= 2.1.5 versions.

Unauthenticated Broken Access Control in ez Form Calculator Premium <= 2.14.1.2 versions.

Unauthenticated Cross Site Request Forgery (CSRF) in Booked <= 3.0.0 versions.