|
4301
|
4.3 |
MEDIUM
Network
|
-
|
-
|
A weakness has been identified in SourceCodester Note Taking App up to 1.0. This impacts an unknown function. This manipulation causes cross-site request forgery. The attack is possible to be carried…
|
CWE-352
CWE-862
Origin Validation Error
Missing Authorization
|
CVE-2026-4971
|
2026-04-25 01:36 |
2026-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4302
|
2.4 |
LOW
Network
|
-
|
-
|
A security vulnerability has been detected in code-projects Online Reviewer System up to 1.0. Affected is an unknown function of the file /system/system/students/assessments/databank/btn_functions.ph…
|
CWE-79
CWE-94
Cross-site Scripting
Code Injection
|
CVE-2026-4972
|
2026-04-25 01:36 |
2026-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4303
|
3.5 |
LOW
Network
|
-
|
-
|
A vulnerability was detected in SourceCodester Online Quiz System up to 1.0. Affected by this vulnerability is an unknown functionality of the file endpoint/add-question.php. Performing a manipulatio…
|
CWE-79
CWE-94
Cross-site Scripting
Code Injection
|
CVE-2026-4973
|
2026-04-25 01:36 |
2026-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4304
|
4.3 |
MEDIUM
Network
|
-
|
-
|
A vulnerability was identified in dloebl CGIF up to 0.5.2. This vulnerability affects the function cgif_addframe of the file src/cgif.c of the component GIF Image Handler. The manipulation of the arg…
|
CWE-189
CWE-190
Numeric Errors
Integer Overflow or Wraparound
|
CVE-2026-4985
|
2026-04-25 01:36 |
2026-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4305
|
7.3 |
HIGH
Network
|
-
|
-
|
A security vulnerability has been detected in chatwoot up to 4.11.1. The affected element is an unknown function of the file /app/login of the component Signup Endpoint. Such manipulation of the argu…
|
CWE-266
CWE-285
Incorrect Privilege Assignment
Improper Authorization
|
CVE-2026-4990
|
2026-04-25 01:36 |
2026-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4306
|
8.0 |
HIGH
Network
|
-
|
-
|
The Ultimate Member plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11.2. This is due to the '{usermeta:password_reset_link}' template tag…
|
CWE-285
Improper Authorization
|
CVE-2026-4248
|
2026-04-25 01:36 |
2026-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4307
|
8.0 |
HIGH
Network
|
-
|
-
|
El plugin Ultimate Member para WordPress es vulnerable a la exposición de información sensible en todas las versiones hasta e incluyendo la 2.11.2. Esto se debe a que la etiqueta de plantilla '{userm…
|
CWE-285
Improper Authorization
|
CVE-2026-4248
|
2026-04-25 01:36 |
2026-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4308
|
3.5 |
LOW
Network
|
-
|
-
|
A vulnerability was detected in QDOCS Smart School Management System up to 7.2. The impacted element is an unknown function of the file /admin/enquiry of the component Admission Enquiry Module. Perfo…
|
CWE-79
CWE-94
Cross-site Scripting
Code Injection
|
CVE-2026-4991
|
2026-04-25 01:36 |
2026-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4309
|
3.5 |
LOW
Network
|
-
|
-
|
Una vulnerabilidad fue detectada en QDOCS Smart School Management System hasta la versión 7.2. El elemento afectado es una función desconocida del archivo /admin/enquiry del componente Módulo de Cons…
|
CWE-79
CWE-94
Cross-site Scripting
Code Injection
|
CVE-2026-4991
|
2026-04-25 01:36 |
2026-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4310
|
4.3 |
MEDIUM
Network
|
-
|
-
|
A flaw has been found in wandb OpenUI up to 1.0. This affects the function create_share/get_share of the file backend/openui/server.py of the component HTMLAnnotator Component. Executing a manipulati…
|
CWE-79
CWE-94
Cross-site Scripting
Code Injection
|
CVE-2026-4992
|
2026-04-25 01:36 |
2026-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
