MEDIUM Severity CVEs

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themelogger Contac

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themelogger Contac

Missing Authorization vulnerability in platcom WP-Asambleas wp-asambleas allows Exploiting Incorrectly Configured Access

Cross-Site Request Forgery (CSRF) vulnerability in seyyed-amir Erima Zarinpal Donate erima-zarinpal-donate allows Cross

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alobaidi Archive P

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ignacio Perez Hove

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aaron D. Campbell

Missing Authorization vulnerability in bPlugins Animated Text Block animated-text-block allows Exploiting Incorrectly Co

WorkOS Hosted AuthKit before 2025-01-07 allows a password authentication MFA bypass (by enrolling a new authentication f

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Tekrom Tech

The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Open Redirect in all versions up to, and i

Mattermost versions 10.1.x <= 10.1.3, 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2 fail to res

The read command is used to read the keyboard input from the user, while reads it keeps the input length in a 32-bit int

The Photo Contest | Competition | Video Contest WordPress plugin through 2.8.1 does not sanitise and escape a parameter

The Form Maker by 10Web WordPress plugin before 1.15.33 does not sanitise and escape some of its settings, which could

The Logo Slider WordPress plugin before 4.6.0 does not validate and escape some of its shortcode attributes before outp

A vulnerability has been found in vTiger CRM 6.4.0/6.5.0 and classified as problematic. This vulnerability affects unkno

A vulnerability, which was classified as critical, has been found in FiberHome AN5506-01A ONU GPON RP2511. Affected by t

A vulnerability was found in ShopXO up to 6.4.0. It has been classified as problematic. This affects an unknown part of

A vulnerability was found in LB-LINK AC1900 Router 1.0.2 and classified as critical. Affected by this issue is the funct

A vulnerability has been found in LB-LINK AC1900 Router 1.0.2 and classified as critical. Affected by this vulnerability

A vulnerability, which was classified as critical, was found in LB-LINK AC1900 Router 1.0.2. Affected is the function we

A vulnerability, which was classified as problematic, has been found in SourceCodester Best Employee Management System 1

A vulnerability classified as problematic was found in SourceCodester Best Employee Management System 1.0. This vulnerab

A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been rated as problematic. Affec

A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been declared as critical. Affec

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in StellarWP Give – Divi D

A vulnerability has been found in Anhui Xufan Information Technology EasyCVR up to 2.7.0 and classified as problematic.

A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ff_aac_searc

A vulnerability classified as critical has been found in SourceCodester Best Employee Management System 1.0. This affect

A vulnerability was found in SourceCodester E-Learning System 1.0. It has been classified as critical. Affected is an un

A vulnerability was found in SourceCodester E-Learning System 1.0 and classified as problematic. This issue affects some

A vulnerability has been found in PHPGurukul Online Nurse Hiring System 1.0 and classified as critical. This vulnerabili

Versions of the package tarteaucitronjs before 1.17.0 are vulnerable to Cross-site Scripting (XSS) via the getElemWidth(

A vulnerability was found in SourceCodester Telecom Billing Management System 1.0. It has been rated as critical. This i

A vulnerability classified as problematic was found in opensolon Solon up to 3.0.8. This vulnerability affects unknown c

A vulnerability classified as critical has been found in PHPGurukul Online Nurse Hiring System 1.0. This affects an unkn

A vulnerability was found in PHPGurukul Online Nurse Hiring System 1.0. It has been rated as critical. Affected by this

A vulnerability was found in PHPGurukul Online Nurse Hiring System 1.0. It has been declared as critical. Affected by th

A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been classified as critical. A

A vulnerability, which was classified as critical, was found in PHPGurukul/Campcodes Online Shopping Portal 2.1. This af

The Accept Donations with PayPal & Stripe plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the r

A vulnerability classified as critical was found in code-projects Real Estate Property Management System 1.0. Affected b

A vulnerability classified as problematic has been found in Harpia DiagSystem 12. Affected is an unknown function of the

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WarfarePlugins Soc

Missing Authorization vulnerability in enituretechnology Distance Based Shipping Calculator distance-based-shipping-calc

Missing Authorization vulnerability in appsbd Vitepos vitepos-lite allows Exploiting Incorrectly Configured Access Contr

A vulnerability, which was classified as problematic, was found in OFCMS 1.1.3. Affected is an unknown function. The man

A vulnerability, which was classified as problematic, has been found in westboy CicadasCMS 1.0. This issue affects some

The Rife Elementor Extensions & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plug