Description
Ampache is a web based audio/video streaming application and file manager. Stored Cross Site Scripting (XSS) vulnerability in ampache before v6.3.1 allows a remote attacker to execute code via a crafted payload to serval parameters in the post request of /preferences.php?action=admin_update_preferences. This vulnerability is fixed in 6.3.1.
Remediation
References
Related Vulnerabilities
WordPress 5.2.x Prototype Pollution (5.2 - 5.2.14)
WordPress Plugin Profile Builder Pro SQL Injection (3.3.2)
MySQL Uncontrolled Resource Consumption Vulnerability (CVE-2020-11080)
MyBB Improper Privilege Management Vulnerability (CVE-2018-1000503)
WordPress Plugin Qiniu Cloudtuchuang Cross-Site Scripting (1.8)