Lucene search
+L

653 matches found

NVD
NVD
•added 2025/02/24 3:15 p.m.•12 views

CVE-2025-27323

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jon Bishop WP About Author wp-about-author allows DOM-Based XSS.This issue affects WP About Author: from n/a through = 1.5...

6.5CVSS0.0022EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/02/24 3:13 p.m.•13 views

WordPress WP About Author plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin WP About Author versions = 1.5...

6.5CVSS6.1AI score0.0022EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
•added 2025/02/24 2:49 p.m.•10 views

CVE-2025-27323 WordPress WP About Author plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jon Bishop WP About Author wp-about-author allows DOM-Based XSS.This issue affects WP About Author: from n/a through = 1.5...

6.5CVSS8.6AI score0.0022EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/24 2:49 p.m.•29 views

CVE-2025-27323 WordPress WP About Author plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jon Bishop WP About Author wp-about-author allows DOM-Based XSS.This issue affects WP About Author: from n/a through = 1.5...

6.5CVSS0.0022EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/24 2:49 p.m.•62 views

CVE-2025-27323

CVE-2025-27323 affects the WordPress plugin WP About Author. The vulnerability is described as a Cross-Site Scripting (DOM-Based XSS) flaw caused by improper input neutralization during web page generation. Affected version range is WP About Author from n/a through 1.5, with the CVSSv3.1 base sco...

6.5CVSS7.2AI score0.0022EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/24 12:00 a.m.•13 views

WordPress plugin WP About Author 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.7AI score0.0022EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/24 12:00 a.m.•2 views

CVE-2025-27323: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jon Bishop WP About Author wp-about-author allows DOM-Based XSS.This issue affects WP About Author: from n/a through = 1.5...

6.5CVSS5.8AI score0.0022EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/04 10:18 p.m.•11 views

CVE-2024-53789

Cross-Site Request Forgery CSRF vulnerability in Ritesh Sanap Advanced What should we write next about advanced-what-should-we-write-about-next allows Stored XSS.This issue affects Advanced What should we write next about: from n/a through = 1.0.3...

7.1CVSS7.2AI score0.00158EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/24 12:00 a.m.•17 views

PT-2025-3397

Name of the Vulnerable Software and Affected Versions NodeBB version 3.11.0 Description A persistent cross-site scripting XSS issue allows remote attackers to store arbitrary code in the 'about me' section of their profile. This enables attackers to execute malicious scripts on the website...

4.6CVSS6.3AI score0.39265EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/24 12:00 a.m.•4 views

CVE-2024-57041: Improper Neutralization of Input During Web Page Generation

A persistent cross-site scripting XSS vulnerability in NodeBB v3.11.0 allows remote attackers to store arbitrary code in the 'about me' section of their profile...

4.6CVSS6AI score0.39265EPSS
SaveExploits1References4
NVD
NVD
•added 2024/12/29 5:15 p.m.•28 views

CVE-2024-13017

A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/aboutus.php of the component About Us Page. The manipulation of the argument title leads to cross site scripting. The attack c...

6.1CVSS0.00413EPSS
SaveExploits0References4
OSV
OSV
•added 2024/12/29 5:15 p.m.•13 views

CVE-2024-13017

A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/aboutus.php of the component About Us Page. The manipulation of the argument title leads to cross site scripting. The attack c...

6.1CVSS3.8AI score0.00413EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/12/29 5:00 p.m.•41 views

CVE-2024-13017 PHPGurukul Maid Hiring Management System About Us Page aboutus.php cross site scripting

A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/aboutus.php of the component About Us Page. The manipulation of the argument title leads to cross site scripting. The attack c...

5.1CVSS0.00413EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/12/29 5:00 p.m.•18 views

CVE-2024-13017 PHPGurukul Maid Hiring Management System About Us Page aboutus.php cross site scripting

A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/aboutus.php of the component About Us Page. The manipulation of the argument title leads to cross site scripting. The attack c...

5.1CVSS6.4AI score0.00413EPSS
SaveExploits0References4
CVE
CVE
•added 2024/12/29 5:00 p.m.•65 views

CVE-2024-13017

PHPGurukul Maid Hiring Management System 1.0 is affected by a cross-site scripting vulnerability in /admin/aboutus.php via the title parameter. The issue is exploitable remotely (network vector) and described as requiring user interaction in some sources, with the impact limited to the affected p...

6.1CVSS3.7AI score0.00413EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2024/12/29 12:00 a.m.•15 views

PT-2024-17875 · Unknown · Phpgurukul Maid Hiring Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Maid Hiring Management System version 1.0 Description: A vulnerability was found in the PHPGurukul Maid Hiring Management System. It affects unknown code of the file /admin/aboutus.php of the component About Us Page. The manipulati...

6.1CVSS4.1AI score0.00413EPSS
SaveExploits0References10
OSV
OSV
•added 2024/12/16 10:18 p.m.•81 views

GHSA-6PFC-W86R-54Q6 Welcome and About GeoServer pages communicate version and revision information

Impact The welcome and about page includes version and revision information about the software in use including library and components used. This information is sensitive from a security point of view because it allows software used by the server to be easily identified. Proof of Concept 1. Welco...

5.3CVSS5.4AI score0.00697EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/16 12:00 a.m.•2 views

CVE-2024-55987: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ritesh Sanap Advanced What should we write next about advanced-what-should-we-write-about-next allows SQL Injection.This issue affects Advanced What should we write next about: from n/a through =...

8.5CVSS5.8AI score0.00504EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/16 12:00 a.m.•1 views

CVE-2024-35230: Exposure of Sensitive Information to an Unauthorized Actor

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. In affected versions the welcome and about page includes version and revision information about the software in use including library and components used. This information is sensitive...

5.3CVSS5.6AI score0.00697EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•0 views

CVE-2024-54334: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zeshanb Quran Phrases About Most People Shortcodes quran-phrases-about-most-people-shortcodes allows DOM-Based XSS.This issue affects Quran Phrases About Most People Shortcodes: from n/a through =...

6.5CVSS5.8AI score0.00331EPSS
SaveExploits0References1
Rows per page
Query Builder