A vulnerability, which was classified as problematic, has been found in Zoo Management System 1.0. Affected by this issue is /zoo/admin/public_html/view_accounts?type=zookeeper of the content module. The manipulation of the argument admin_name with the input alert(1) leads to an authenticated cross site scripting. Exploit details have been disclosed to the public.

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.1.2.

The WP Admin Style WordPress plugin through 0.1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed

OS Command Injection in GitHub repository yogeshojha/rengine prior to 1.2.0.

Integer Overflow or Wraparound in GitHub repository publify/publify prior to 9.2.10.

Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9.