Month: October 2021

[webapps] WordPress Plugin TaxoPress 3.0.7.1 – Stored Cross-Site Scripting (XSS) (Authenticated)

[webapps] Engineers Online Portal 1.0 – 'multiple' Stored Cross-Site Scripting (XSS)

[webapps] Online Event Booking and Reservation System 1.0 – 'reason' Stored Cross-Site Scripting (XSS)

[webapps] phpMyAdmin 4.8.1 – Remote Code Execution (RCE)

[webapps] WordPress 4.9.6 – Arbitrary File Deletion (Authenticated) (2)

[webapps] WordPress Plugin Ninja Tables 4.1.7 – Stored Cross-Site Scripting (XSS)

[webapps] WordPress Plugin Media-Tags 3.2.0.2 – Stored Cross-Site Scripting (XSS)

[webapps] Engineers Online Portal 1.0 – 'id' SQL Injection

[webapps] Engineers Online Portal 1.0 – 'multiple' Authentication Bypass

[webapps] WordPress Plugin Ninja Tables 4.1.7 – Stored Cross-Site Scripting (XSS)