Anmelden API-Schlüssel holen

bdthemes Smart Admin Assistant Schwachstellen (CVE)

Für bdthemes Smart Admin Assistant veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

1 Ergebnisse

5.4Mittel

CVE-2026-92991 vor 1 Monat

Biggopti Library (Various Versions) - Cross-Site Scripting via display_id from Sigmative API

bdthemes Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator; bdthemes Pixel Gallery Addons for Elementor; bdthemes Smart Admin Assistant; bdthemes Ultimate Store Kit – Store Builder Addons for Elementor, WooCommerce Store Builder, EDD Store Builder

The Biggop Library is vulnerable to Cross-Site Scripting via the ‘display_id’ parameter from the Sigmative API in various versions due to insufficient output escaping. This makes it possible for attackers who can compromise the Sigmative API server to inject …