Month: December 2020

[webapps] Flexmonster Pivot Table & Charts 2.7.17 – 'To remote CSV' Reflected XSS

[webapps] Flexmonster Pivot Table & Charts 2.7.17 – 'Remote Report' Reflected XSS

[webapps] Flexmonster Pivot Table & Charts 2.7.17 – 'To OLAP' Reflected XSS

[webapps] Spiceworks 7.5 – HTTP Header Injection

[webapps] Academy-LMS 4.3 – Stored XSS

[webapps] Spotweb 1.4.9 – 'search' SQL Injection

[webapps] Queue Management System 4.0.0 – "Add User" Stored XSS

[webapps] WordPress Plugin Contact Form 7 5.3.1 – Unrestricted File Upload