BP Better Messages Plugin prior 1.9.9.41 on WordPress AJAX Action cross-site request forgery

A vulnerability was found in BP Better Messages Plugin on WordPress (WordPress Plugin) and classified as problematic. Affected by this issue is the function bp_better_messages_leave_chat/bp_better_messages_join_chat/bp_messages_leave_thread/bp_messages_mute_thread/bp_messages_unmute_thread/bp_better_messages_add_user_to_thread/bp_better_messages_exclude_user_from_thread of the component AJAX Action Handler. Upgrading to version 1.9.9.41 eliminates this vulnerability. Applying a patch is able to eliminate this problem. The bugfix is ready for download at plugins.trac.wordpress.org. The best possible mitigation is suggested to be upgrading to the latest version.

Common Vulnerabilityies and Exposures

Contact us to get started

CVE-2022-32405 : SOURCECODESTER PRISON MANAGEMENT SYSTEM 1.0 VIEW_PRISON.PHP ID SQL INJECTION

CVE-2022-32405 : SOURCECODESTER PRISON MANAGEMENT SYSTEM 1.0 VIEW_PRISON.PHP ID SQL INJECTION

Description Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the ‘id’ parameter at /pms/admin/prisons/view_prison.php:4 References

CVE-2022-20651 : CISCO ADAPTIVE SECURITY DEVICE MANAGER LOG FILE

CVE-2022-20651 : CISCO ADAPTIVE SECURITY DEVICE MANAGER LOG FILE

Description A vulnerability in the logging component of Cisco Adaptive Security Device Manager (ASDM) could allow an authenticated, local attacker