>> CATEGORY: Security

CMSimple_XH 1.7.4 – Remote Code Execution (RCE) (Authenticated)

WordPress Plugin JS Jobs Manager 1.1.7 – Unauthenticated Plugin Install/Activation

Cyber Cafe Management System Project (CCMS) 1.0 – SQL Injection Authentication Bypass

Cmsimple 5.4 – Remote Code Execution (RCE) (Authenticated)

Pharmacy Point of Sale System 1.0 – ‘Multiple’ SQL Injection (SQLi)

Storage Unit Rental Management System 1.0 – Remote Code Execution (RCE) (Unauthenticated)

OpenSIS 8.0 – ‘cp_id_miss_attn’ Reflected Cross-Site Scripting (XSS)

WordPress Plugin Select All Categories and Taxonomies 1.3.1 – Reflected Cross-Site Scripting (XSS)

WordPress Plugin Redirect 404 to Parent 1.3.0 – Reflected Cross-Site Scripting (XSS)

Mitrastar GPT-2541GNAC-N1 – Privilege escalation