ZEROF Web Server 2.0 allows /admin.back XSS.
CVE-2022-25322
ZEROF Web Server 2.0 allows /HandleEvent SQL Injection.
CVE-2022-25321
An issue was discovered in Cerebrate through 1.4. XSS could occur in the bookmarks component.
CVE-2022-25320
An issue was discovered in Cerebrate through 1.4. Username enumeration could occur.
CVE-2022-2532
The Feed Them Social WordPress plugin before 3.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting
CVE-2022-25319
An issue was discovered in Cerebrate through 1.4. Endpoints could be open even when not enabled.