Vulnerabilities
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-11-05 | CVE-2024-9459 | SQL Injection vulnerability in Zohocorp Manageengine Exchange Reporter Plus Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module. | 8.8 |
| 2024-11-05 | CVE-2024-9689 | Cross-Site Request Forgery (CSRF) vulnerability in Shaon Post From Frontend The Post From Frontend WordPress plugin through 1.0.0 does not have CSRF check when deleting posts, which could allow attackers to make logged in admin perform such action via a CSRF attack | 4.3 |
| 2024-11-05 | CVE-2024-9883 | Cross-site Scripting vulnerability in Podsfoundation Pods The Pods WordPress plugin before 3.2.7.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). | 4.8 |
| 2024-11-05 | CVE-2024-10340 | The Shortcodes Blocks Creator Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'scu' shortcode in versions up to, and including, 2.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. | 6.4 |
| 2024-11-05 | CVE-2024-10807 | Cross-site Scripting vulnerability in Anujkumar Hospital Management System 4.0 A vulnerability was found in PHPGurukul Hospital Management System 4.0. | 4.8 |
| 2024-11-05 | CVE-2024-10808 | SQL Injection vulnerability in Anisha E-Health Care System 1.0 A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. | 7.5 |
| 2024-11-05 | CVE-2024-10809 | SQL Injection vulnerability in Anisha E-Health Care System 1.0 A vulnerability was found in code-projects E-Health Care System 1.0 and classified as critical. | 7.5 |
| 2024-11-05 | CVE-2024-10810 | SQL Injection vulnerability in Anisha E-Health Care System 1.0 A vulnerability was found in code-projects E-Health Care System 1.0. | 7.5 |
| 2024-11-05 | CVE-2024-10806 | Cross-site Scripting vulnerability in Anujkumar Hospital Management System 4.0 A vulnerability was found in PHPGurukul Hospital Management System 4.0. | 4.8 |
| 2024-11-05 | CVE-2023-34443 | Cross-site Scripting vulnerability in Combodo Itop Combodo iTop is a simple, web based IT Service Management tool. | 6.1 |