Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via the user_email parameter at /admin/login.php.

An arbitrary file upload vulnerability in the component /admin/products/controller.php?action=add of Online Ordering System v2.3.2 allows attackers to execute arbitrary code via a crafted PHP file.

Use after free in Feedback service on Chrome OS in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interaction. (Chromium security severity: Medium)

Wellcms 2.2.0 is vulnerable to Cross Site Request Forgery (CSRF).

jizhicms v2.3.1 has SQL injection in the background.

An issue was discovered in jizhicms v2.3.1. There is a CSRF vulnerability that can add a admin.