CVE-2023-36530

Mô tả

Tham khảo

• patchstack.com/database/vulnerability/sp-client-document-manager/wordpress-sp-project-document-manager-plugin-4-67-cross-site-scripting-xss-vulnerability · Third Party Advisory

Lỗ hổng khác của sp project & document manager

• CVE-2024-37224TRUNG BÌNH 6.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in smartypants SP Project & Document Manager.Th…
• CVE-2024-3749TRUNG BÌNH 6.5The SP Project & Document Manager WordPress plugin through 4.71 lacks proper access controllers and allows a logged in user to view and down…
• CVE-2024-3748TRUNG BÌNH 6.5The SP Project & Document Manager WordPress plugin through 4.71 is missing validation in its upload function, allowing a user to manipulate …
• CVE-2024-24868CAO 8.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypants SP Project & Document Mana…
• CVE-2023-36677CAO 8.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypants SP Project & Document Mana…