WordPress Custom Global Variables plugin version 1.0.5 suffers from a persistent cross site scripting vulnerability.
SmartAgent 3.1.0 – Privilege Escalation
Cemetry Mapping and Information System 1.0 – Multiple SQL Injections
Gila CMS 2.0.0 – Remote Code Execution (Unauthenticated)
http://www.abtbungkla.go.th/test.php notified by Anonymous Indonesia
OpenCart 3.0.36 – ATO via Cross Site Request Forgery
WordPress Plugin Custom Global Variables 1.0.5 – ‘name’ Stored Cross-Site Scripting (XSS)
Cemetry Mapping and Information System 1.0 – Multiple Stored Cross-Site Scripting
EyesOfNetwork 5.3 – RCE & PrivEsc
EyesOfNetwork 5.3 – LFI