Mohin Paramasivam WordPress Plugin Survey & Poll 1.5.7.3 - 'sss_params' SQL Injection (2)
webapps php

Nikhil Kapoor WordPress Plugin WP Sitemap Page 1.6.4 - Stored Cross-Site Scripting (XSS)
webapps php

Eric Salario SmartFTP Client 10.0.2909.0 - 'Multiple' Denial of Service (PoC)
dos windows

a-rey Patient Appointment Scheduler System 1.0 - Persistent Cross-Site Scripting
webapps php

a-rey Patient Appointment Scheduler System 1.0 - Unauthenticated File Upload
webapps php

Mason Soroka-Gill FlatCore CMS 2.0.7 - Remote Code Execution (RCE) (Authenticated)
webapps php CVE-2021-39608

Allen Enosh Upputori OpenEMR 6.0.0 - 'noteid' Insecure Direct Object Reference (IDOR)
webapps php CVE-2021-40352

Eric Salario OpenSIS 8.0 'modname' - Directory Traversal
webapps php CVE-2021-40651

Nikhil Kapoor WordPress Plugin Duplicate Page 4.4.1 - Stored Cross-Site Scripting (XSS)
webapps php

Eric Salario OpenSIS Community 8.0 - 'cp_id_miss_attn' SQL Injection
webapps php

Vishwaraj Bhattrai Dolibarr ERP 14.0.1 - Privilege Escalation
webapps php

Aryan Chehreghani Telegram Desktop 2.9.2 - Denial of Service (PoC)
dos windows

Niraj Mahajan WordPress Plugin Payments Plugin | GetPaid 2.4.6 - HTML Injection
webapps php

Fellipe Oliveira Confluence Server 7.12.4 - 'OGNL injection' Remote Code Execution (RCE) (Unauthenticated)
webapps java CVE-2021-26084

Numan Rajkotiya WordPress Plugin ProfilePress 3.1.3 - Privilege Escalation (Unauthenticated)
webapps php CVE-2021-34621

Aryan Chehreghani Bus Pass Management System 1.0 - 'viewid' SQL Injection
webapps php