CVE-2025-46530 – HuangYe WuDeng Hacklog Remote Attachment CSRF Stored XSS

April 24, 2025

CVE ID : CVE-2025-46530

Published : April 24, 2025, 4:15 p.m. | 2 hours, 44 minutes ago

Description : Cross-Site Request Forgery (CSRF) vulnerability in HuangYe WuDeng Hacklog Remote Attachment allows Stored XSS. This issue affects Hacklog Remote Attachment: from n/a through 1.3.2.

Severity: 7.1 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-46529 – StressFree Sites Business Contact Widget Stored Cross-Site Scripting Vulnerability

Next Article CVE-2025-46528 – Steve Availability Calendar CSRF Stored XSS

Highlights

CVE-2025-6827 – Code-Projects Inventory Management System SQL Injection Vulnerability

June 28, 2025

CVE ID : CVE-2025-6827

Published : June 28, 2025, 10:15 p.m. | 21 minutes ago

Description : A vulnerability, which was classified as critical, was found in code-projects Inventory Management System 1.0. This affects an unknown part of the file /php_action/editOrder.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Severity: 7.3 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Designing Better UX For Left-Handed People

This week in AI dev tools: Gemini 2.5 Flash-Lite, GitLab Duo Agent Platform beta, and more (July 25, 2025)

Tenable updates Vulnerability Priority Rating scoring method to flag fewer vulnerabilities as critical

Google adds updated workspace templates in Firebase Studio that leverage new Agent mode

I ran with the Apple Watch and Samsung Watch 8 – here’s the better AI coach

8 smart home gadgets that instantly upgraded my house (and why they work)

I tested Panasonic’s new affordable LED TV model – here’s my brutally honest buying advice

OpenAI teases imminent GPT-5 launch. Here’s what to expect

NativePHP Is Entering Its Next Phase

NativePHP Is Entering Its Next Phase

Medical Card Generator Android App Project Using SQLite

The details of TC39’s last meeting

Elden Ring Nightreign’s Patch 1.02 update next week is adding a feature we’ve all been waiting for since launch — and another I’ve been begging for, too

Elden Ring Nightreign’s Patch 1.02 update next week is adding a feature we’ve all been waiting for since launch — and another I’ve been begging for, too

The next time you look at Microsoft Copilot, it may look back — but who asked for this?

5 Open Source Apps You Can use for Seamless File Transfer Between Linux and Android

CVE-2025-46530 – HuangYe WuDeng Hacklog Remote Attachment CSRF Stored XSS

SharePoint under fire: ToolShell attacks hit organizations worldwide

Rogue CAPTCHAs: Look out for phony verification pages spreading malware

CVE-2025-48063 – XWiki Remote Code Execution via Required Rights Bypass

Feather Wand JMeter: Your AI-Powered Companion

The 30 UX Principles Every Designer Should Know

Marvel Rivals is bringing a wave of swimsuits this summer

CVE-2025-6827 – Code-Projects Inventory Management System SQL Injection Vulnerability

CVE-2025-48261 – MultiVendorX Sensitive Data Injection Vulnerability

FAQ – Product Design in 2025

CVE-2025-36582 – Dell NetWorker SSL/TLS Algorithm Downgrade Information Disclosure

CVE-2025-46530 – HuangYe WuDeng Hacklog Remote Attachment CSRF Stored XSS

Related Posts