|
208851
|
4.9 |
MEDIUM
Network
|
frontaccounting
|
frontaccounting
|
An issue was discovered in FrontAccounting 2.4.7. There is a Directory Traversal vulnerability that can empty folder via admin/inst_lang.php.
|
CWE-22
Path Traversal
|
CVE-2020-21244
|
2024-11-21 14:12 |
2020-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208852
|
9.8 |
CRITICAL
Network
|
metinfo
|
metinfo
|
An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the install/index.php?action=adminsetup&cndata=yes&endata=yes&showdata=yes URI.
|
CWE-89
SQL Injection
|
CVE-2020-20800
|
2024-11-21 14:12 |
2020-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208853
|
5.4 |
MEDIUM
Network
|
elementor
|
elementor_page_builder
|
A stored XSS vulnerability exists in the Custom Link Attributes control Affect function in Elementor Page Builder 2.9.2 and earlier versions. It is caused by inadequate filtering on the link custom a…
|
CWE-79
Cross-site Scripting
|
CVE-2020-20406
|
2024-11-21 14:12 |
2020-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208854
|
6.1 |
MEDIUM
Network
|
codoforum
|
codoforum
|
Codoforum 4.8.3 allows HTML Injection in the 'admin dashboard Manage users Section.'
|
CWE-79
Cross-site Scripting
|
CVE-2020-21845
|
2024-11-21 14:12 |
2020-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208855
|
6.1 |
MEDIUM
Network
|
sagemcom
|
f\@st_3686_firmware
|
Sagemcom F@ST3686 v1.0 HUN 3.97.0 has XSS via RgDiagnostics.asp, RgDdns.asp, RgFirewallEL.asp, RgVpnL2tpPptp.asp.
|
CWE-79
Cross-site Scripting
|
CVE-2020-21733
|
2024-11-21 14:12 |
2020-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208856
|
6.1 |
MEDIUM
Network
|
rukovoditel
|
rukovoditel
|
Rukovoditel Project Management app 2.6 is affected by: Cross Site Scripting (XSS). An attacker can add JavaScript code to the filename.
|
CWE-79
Cross-site Scripting
|
CVE-2020-21732
|
2024-11-21 14:12 |
2020-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208857
|
6.1 |
MEDIUM
Network
|
gazie_project
|
gazie
|
Gazie 7.29 is affected by: Cross Site Scripting (XSS) via http://192.168.100.7/gazie/modules/config/admin_utente.php?user_name=amministratore&Update. An attacker can inject JavaScript code, and the w…
|
CWE-79
Cross-site Scripting
|
CVE-2020-21731
|
2024-11-21 14:12 |
2020-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208858
|
6.1 |
MEDIUM
Network
|
appsaloon
|
wp-gdpr
|
controller/controller-comments.php in WP GDPR plugin through 2.1.1 has unauthenticated stored XSS.
|
CWE-79
Cross-site Scripting
|
CVE-2020-20628
|
2024-11-21 14:12 |
2020-09-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208859
|
5.3 |
MEDIUM
Network
|
givewp
|
givewp
|
The includes/gateways/stripe/includes/admin/admin-actions.php in GiveWP plugin through 2.5.9 for WordPress allows unauthenticated settings change.
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2020-20627
|
2024-11-21 14:12 |
2020-09-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208860
|
5.4 |
MEDIUM
Network
|
lara\'s_google_analytics_project
|
lara\'s_google_analytics
|
lara-google-analytics.php in Lara Google Analytics plugin through 2.0.4 for WordPress allows authenticated stored XSS.
|
CWE-79
Cross-site Scripting
|
CVE-2020-20626
|
2024-11-21 14:12 |
2020-09-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|