References https://www.twcert.org.tw/tw/cp-132-7509-5b734-1.html https://www.twcert.org.tw/newepaper/cp-151-7509-5b734-3.html https://www.twcert.org.tw/en/cp-139-7510-7bd85-2.html https://secalerts.co/vendor/ragic https://www.twcert.org.tw/tw/lp-132-1-6-60.html
Related VulnerabilitiesHepta Platforms｜Heptabase - Stored Cross-Site ScriptingPoCCVE-2026-1115: parisneo/lollms < 2.2.0 - Authenticated Stored XSSPoCwp-livechat-stored-xss: WordPress LiveChat < 3.7.6 - Unauthenticated Stored XSSPoCCVE-2025-62780: ChangeDetection.io <= v0.50.33 - Stored XSS via Watch APIPoCCVE-2024-3231: Popup4Phone <= 1.3.2 - Unauthenticated Stored Cross-Site ScriptingPoCCVE-2025-1232: Site Reviews < 7.2.5 - Unauthenticated Stored XSSPoCCVE-2024-37259: WP Extended < 3.0.0 - Stored Cross-Site ScriptingPoCCVE-2016-15041: MainWP Dashboard <= 3.1.2 - Stored Cross-Site ScriptingPoCCVE-2012-10018: WordPress Mapplic <= 6.1 / Mapplic Lite <= 1.0 - Authenticated Stored XSS via SVG File UploadPoCCVE-2021-24657: Limit Login Attempts WordPress - Stored Cross-site ScriptingPoCCVE-2021-24681: Duplicate Page WordPress - Stored Cross-Site ScriptingPoCCVE-2022-1029: Limit Login Attempts - Stored Cross-Site ScriptingPoCCVE-2022-38130: KeySight RF - smsRestoreDatabaseZip UNC path to Remote Code Execution