Advisories

Publicly disclosed vulnerabilities discovered by Fluid Attacks Research Team.

Severity null

FooGallery - Reflected cross-site scripting (XSS)

cve-2020-2020

Published: 2024-12-06 12:00 COT

Discovered by Andres Roldan

Severity null

rtMedia for WordPress, BuddyPress and bbPress - XML injection (XXE)

cve-2020-2020

Published: 2024-12-06 12:00 COT

Discovered by Andres Roldan

Severity null

Age Verification - Reflected cross-site scripting (XSS)

cve-2020-2020

Published: 2024-12-06 12:00 COT

Discovered by Andres Roldan

Severity null

Easy Code Snippets - Reflected cross-site scripting (XSS)

cve-2020-2020

Published: 2024-12-06 12:00 COT

Discovered by Andres Roldan

Severity null

Different Menu in Different Pages - Insecure deserialization

cve-2020-2020

Published: 2024-12-06 12:00 COT

Discovered by Andres Roldan

Severity null

Ad Inserter - Reflected cross-site scripting (XSS)

cve-2020-2020

Published: 2024-12-06 12:00 COT

Discovered by Andres Roldan

Severity 5.8

Deep Freeze - Out-of-bounds Read

CVE-2024-8159

Published: 2024-08-25 12:00 COT

Discovered by Andres Roldan

Severity 4.1

Directus 10.13.0 - DOM-based XSS

CVE-2024-6533

Published: 2024-08-14 12:00 COT

Discovered by Miguel Gómez

Severity 4.1

Directus 10.13.0 - IDOR

CVE-2024-6534

Published: 2024-08-14 12:00 COT

Discovered by Miguel Gómez

For more information, you can read our Disclosure Policy

Fluid Logo Footer

Hacking software for over 20 years

Fluid Attacks tests applications and other systems, covering all software development stages. Our team assists clients in quickly identifying and managing vulnerabilities to reduce the risk of incidents and deploy secure technology.

Copyright © 0 Fluid Attacks. We hack your software. All rights reserved.