Murat DEMİRCİ WordPress Plugin AccessPress Social Icons 1.8.2 - 'icon title' Stored Cross-Site Scripting (XSS)
webapps php

Murat DEMİRCİ WordPress Plugin WP Symposium Pro 2021.10 - 'wps_admin_forum_add_name' Stored Cross-Site Scripting (XSS)
webapps php

Cristian \'void\' Giustini FormaLMS 2.4.4 - Authentication Bypass
webapps multiple CVE-2021-43136

tahaafarooq YeaLink SIP-TXXXP 53.84.0.15 - 'cmd' Command Injection (Authenticated)
webapps hardware

Ragavender A G Employee Daily Task Management System 1.0 - 'Name' Stored Cross-Site Scripting (XSS)
webapps php

Murat DEMİRCİ WordPress Plugin Backup and Restore 1.0.3 - Arbitrary File Deletion
webapps php

Martin Cernac Froxlor 0.10.29.1 - SQL Injection (Authenticated)
webapps php CVE-2021-42325

Aryan Chehreghani Money Transfer Management System 1.0 - Authentication Bypass
webapps php

Vulnerability-Lab ImportExportTools NG 10.0.4 - HTML Injection
webapps multiple

Vulnerability-Lab Payment Terminal 3.1 - 'Multiple' Cross-Site Scripting (XSS)
webapps php

Brian Rodriguez 10-Strike Network Inventory Explorer Pro 9.31 - 'srvInventoryWebServer' Unquoted Service Path
local windows

Vulnerability-Lab Ultimate POS 4.4 - 'name' Cross-Site Scripting (XSS)
webapps php

Vulnerability-Lab Vanguard 2.1 - 'Search' Cross-Site Scripting (XSS)
webapps php

Vulnerability-Lab Isshue Shopping Cart 3.5 - 'Title' Cross Site Scripting (XSS)
webapps multiple

Vulnerability-Lab Mult-e-Cart Ultimate 2.4 - 'id' SQL Injection
webapps php

Vulnerability-Lab PHP Melody 3.0 - Persistent Cross-Site Scripting (XSS)
webapps php