Anwendungssicherheit
ANWENDUNGSSICHERHEIT
🟠 CVE-2025-52747: High Schwachstelle
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jthemes Themebox - Digital Products Ecommerce allows Reflected...
ANWENDUNGSSICHERHEIT
🟠 CVE-2025-22741: High Schwachstelle
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RiceTheme Felan Framework allows Reflected XSS. This issue...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-8143: High Schwachstelle
The HBook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'hb_country_iso', 'hb_usa_state_iso', and 'hb_canada_province_iso' parameters in all...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-40819: High Schwachstelle
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the sync_data24 task due to improper neutralization of...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-40818: High Schwachstelle
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the _mb24confi_getDevice function due to improper neutralization of...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-40817: High Schwachstelle
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAlarmProfiles function due to improper neutralization of...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-40816: High Schwachstelle
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the mb24alarm.php files _mb24confi_getTagAlarm function due to improper...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-40815: High Schwachstelle
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the _mb24api_getUserAccount function due to improper neutralization of...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-40814: High Schwachstelle
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dataapi.php files _mb24confi_getTagAlarm function due to improper...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-40813: High Schwachstelle
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getLiveValues functions tagid parameter due to improper...