Description
Several Cross-Site Scripting vulnerabilities in the Curtain WordPress plugin. Due to these Cross-Site Scripting vulnerabilities, an attacker would be able to steal cookies, hijack sessions’ or control the browser of the victim.
CVE-2022-1558 : Multiple Stored Cross-Site Scripting vulnerabilities in WordPress curtain plugin 1.0.2
- cybersecurity insights
- May 23, 2022
- 5:24 pm
Contact us to get started
CVE-2022-2641 : HORNER AUTOMATION RCC 972 15.40 HARD-CODED KEY
Description Horner Automation’s RCC 972 with firmware version 15.40 has a static encryption key on the device. This could allow
CVE-2022-3270 : FESTO VTEM-S1 INSUFFICIENT TECHNICAL DOCUMENTATION
Description In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead
CVE-2022-4221 : ASUS NAS-M25 UP TO 1.0.1.7 COOKIE OS COMMAND INJECTION
Description Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) vulnerability in Asus NAS-M25 allows an