PHP - CVE CyberSecurity Database News (Page 83)

Apr 23, 2024 XSS Exploit PHP

CVE-2024-4072 - Cross-Site Scripting (XSS) Exploit in Kashipara Online Furniture Shopping Ecommerce Website 1.

A new vulnerability has been uncovered in the Kashipara Online Furniture Shopping Ecommerce Website 1., tracked as CVE-2024-4072 (VDB-261798). This issue opens

Apr 23, 2024 WordPress Exploit PHP

CVE-2024-28890 - How Forminator's File Upload Vulnerability Puts Your WordPress Site at Risk

--- Executive Summary CVE-2024-28890 affects the popular WordPress plugin Forminator prior to version 1.29.. The core problem? Anyone could upload dangerous files—think

Apr 19, 2024 Exploit PHP

CVE-2024-22640 - How TCPDF ≤6.6.5 Is Vulnerable to a ReDoS Attack Via Crafted Colors

If you use TCPDF to generate PDFs from HTML in your PHP projects, there’s a new vulnerability you need to know about: CVE-2024-

Apr 18, 2024 WordPress Exploit PHP Zachary Segal CataBlog

CVE-2023-47843 - Path Traversal Vulnerability in CataBlog (Versions up to 1.7.) – Explained with Code Examples and Exploit Details

The WordPress plugin CataBlog, developed by Zachary Segal, is a popular tool that lets site owners manage catalogs of items, like products or portfolios. On

Apr 16, 2024 XSS WordPress PHP LiteSpeed Technologies LiteSpeed Cache

CVE-2023-40000 - Stored XSS Vulnerability in LiteSpeed Cache (≤ v5.7) Explained with Code and Exploit

In this post, we dive deep into CVE-2023-40000, a web security flaw found in LiteSpeed Cache — a widely used WordPress caching plugin. This