Advisories · Weakness
CWE-82.
Every Advisory and CVE whose sources give the weakness CWE-82, newest first.
- CVSS 5.3 Medium
Zammad: Improper neutralization of `srcset` attribute in IMG tags in Zammad
- zammad
- CWE-82
- CVSS 8.5 High
WordPress JetEngine <= 3.7.0 - Remote Code Execution (RCE) Vulnerability
- Crocoblock JetEngine
- CWE-82
- CVSS 9.9 CriticalCritical · CVSS 9+
WordPress Event Tickets with Ticket Scanner plugin <= 2.3.11 - Remote Code Execution (RCE) vulnerability
- Vollstart Event Tickets with Ticket Scanner
- CWE-82
- CVSS 9.1 CriticalCritical · CVSS 9+
WordPress Popup by Supsystic plugin <= 1.10.29 - Remote Code Execution (RCE) vulnerability
- Popup by Supsystic
- CWE-82
- CVSS 9.1 CriticalCritical · CVSS 9+
WordPress Podlove Podcast Publisher plugin <= 4.1.15 - Admin+ Remote Code Execution (RCE) vulnerability
- Eric Teubert Podlove Podcast Publisher
- CWE-82
- CVSS 9.1 CriticalCritical · CVSS 9+
WordPress Contact Form by Supsystic plugin <= 1.7.28 - Remote Code Execution (RCE) vulnerability
- Contact Form by Supsystic
- CWE-82
- CVSS 9.1 CriticalCritical · CVSS 9+
WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.121 - Remote Code Execution (RCE) vulnerability
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- CWE-82
- CVSS 5.4 Medium
Stored XSS in Foundry Slate Query Dropdown menu
- com.palantir.foundry:foundry-frontend
- CWE-82