Lucene search

K

Visitors Security Vulnerabilities

cve
cve

CVE-2024-35737

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Loopus WP Visitors Tracker allows Reflected XSS.This issue affects WP Visitors Tracker: from n/a through...

7.1CVSS

7AI Score

0.0004EPSS

2024-06-08 01:15 PM
21
cve
cve

CVE-2023-48752

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Happyforms Form builder to get in touch with visitors, grow your email list and collect payments — Happyforms allows Reflected XSS.This issue affects Form builder to get in touch with visitors,...

7.1CVSS

6.5AI Score

0.0005EPSS

2023-11-30 05:15 PM
24
cve
cve

CVE-2023-0096

The Happyforms WordPress plugin before 1.22.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...

5.4CVSS

5.3AI Score

0.001EPSS

2023-02-06 08:15 PM
39
cve
cve

CVE-2022-44139

Apartment Visitor Management System v1.0 is vulnerable to SQL Injection via...

9.8CVSS

9.8AI Score

0.002EPSS

2022-11-23 04:15 PM
26
4
cve
cve

CVE-2022-3131

The Search Logger WordPress plugin through 0.9 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege...

7.2CVSS

7.1AI Score

0.001EPSS

2022-10-17 12:15 PM
32
2
cve
cve

CVE-2022-2772

A vulnerability was found in SourceCodester Apartment Visitor Management System and classified as critical. Affected by this issue is some unknown functionality of the file action-visitor.php. The manipulation of the argument editid/remark leads to sql injection. The attack may be launched...

9.8CVSS

9.6AI Score

0.001EPSS

2022-08-11 12:15 PM
25
4
cve
cve

CVE-2022-2773

A vulnerability was found in SourceCodester Apartment Visitor Management System. It has been classified as problematic. This affects an unknown part of the file profile.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-206169...

6.1CVSS

6AI Score

0.001EPSS

2022-08-11 12:15 PM
21
2
cve
cve

CVE-2022-2684

A vulnerability has been found in SourceCodester Apartment Visitor Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /manage-apartment.php. The manipulation of the argument Apartment Number with the input alert(1) leads to cross site...

5.4CVSS

5.3AI Score

0.001EPSS

2022-08-05 09:15 PM
29
3
cve
cve

CVE-2022-2677

A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been classified as critical. This affects an unknown part of the file index.php. The manipulation of the argument username with the input ' AND (SELECT 4955 FROM (SELECT(SLEEP(5)))RSzF) AND 'htiy'='htiy...

9.8CVSS

9.7AI Score

0.002EPSS

2022-08-05 09:15 PM
29
5
cve
cve

CVE-2021-38833

SQL injection vulnerability in PHPGurukul Apartment Visitors Management System (AVMS) v. 1.0 allows attackers to execute arbitrary SQL statements and to gain...

9.8CVSS

10AI Score

0.018EPSS

2021-09-13 07:15 PM
26
cve
cve

CVE-2021-24350

The Visitors WordPress plugin through 0.3 is affected by an Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. The plugin would display the user's user agent string without validation or encoding within the WordPress admin...

6.1CVSS

5.8AI Score

0.001EPSS

2021-06-14 02:15 PM
34
4
cve
cve

CVE-2017-18537

The visitors-online plugin before 1.0.0 for WordPress has multiple XSS...

6.1CVSS

6AI Score

0.001EPSS

2019-08-21 12:15 PM
23
cve
cve

CVE-2015-9325

The visitors-online plugin before 0.4 for WordPress has SQL...

9.8CVSS

9.9AI Score

0.001EPSS

2019-08-16 02:15 PM
62
cve
cve

CVE-2017-2171

Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version 1.5.7, Custom Admin Page prior to version 0.1.2, Custom Fields Search prior...

6.1CVSS

6.1AI Score

0.001EPSS

2017-05-22 04:29 PM
33