Lucene search
+L

690 matches found

Positive Technologies
Positive Technologies
•added 2025/03/07 12:00 a.m.•6 views

PT-2025-10024

Name of the Vulnerable Software and Affected Versions PHPGurukul Emergency Ambulance Hiring Portal version 1.0 Description A critical vulnerability was found in the PHPGurukul Emergency Ambulance Hiring Portal. The issue affects an unknown function of the file /admin/about-us.php. The manipulatio...

9.8CVSS0.00641EPSS
SaveExploits1References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/07 12:00 a.m.•6 views

CVE-2025-2057: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected is an unknown function of the file /admin/about-us.php. The manipulation of the argument pagedes leads to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS7AI score0.00641EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/26 3:29 p.m.•30 views

CVE-2025-27323

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jon Bishop WP About Author wp-about-author allows DOM-Based XSS.This issue affects WP About Author: from n/a through = 1.5...

6.5CVSS7.2AI score0.0022EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/24 3:15 p.m.•15 views

CVE-2025-27323

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jon Bishop WP About Author wp-about-author allows DOM-Based XSS.This issue affects WP About Author: from n/a through = 1.5...

6.5CVSS0.0022EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/02/24 3:13 p.m.•18 views

WordPress WP About Author plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin WP About Author versions = 1.5...

6.5CVSS6.1AI score0.0022EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
•added 2025/02/24 2:49 p.m.•31 views

CVE-2025-27323 WordPress WP About Author plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jon Bishop WP About Author wp-about-author allows DOM-Based XSS.This issue affects WP About Author: from n/a through = 1.5...

6.5CVSS0.0022EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/24 2:49 p.m.•12 views

CVE-2025-27323 WordPress WP About Author plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jon Bishop WP About Author wp-about-author allows DOM-Based XSS.This issue affects WP About Author: from n/a through = 1.5...

6.5CVSS8.6AI score0.0022EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/24 2:49 p.m.•67 views

CVE-2025-27323

CVE-2025-27323 affects the WordPress plugin WP About Author. The vulnerability is described as a Cross-Site Scripting (DOM-Based XSS) flaw caused by improper input neutralization during web page generation. Affected version range is WP About Author from n/a through 1.5, with the CVSSv3.1 base sco...

6.5CVSS7.2AI score0.0022EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/24 12:00 a.m.•15 views

WordPress plugin WP About Author 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.7AI score0.0022EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/02/24 12:00 a.m.•7 views

PT-2025-7746

Name of the Vulnerable Software and Affected Versions WP About Author versions 1.5 and earlier Description The issue affects the WP About Author plugin, allowing for DOM-Based XSS due to improper neutralization of input during web page generation. This can lead to Cross-site Scripting attacks...

6.5CVSS0.0022EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/24 12:00 a.m.•6 views

CVE-2025-27323: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jon Bishop WP About Author wp-about-author allows DOM-Based XSS.This issue affects WP About Author: from n/a through = 1.5...

6.5CVSS5.8AI score0.0022EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/04 10:18 p.m.•13 views

CVE-2024-53789

Cross-Site Request Forgery CSRF vulnerability in Ritesh Sanap Advanced What should we write next about advanced-what-should-we-write-about-next allows Stored XSS.This issue affects Advanced What should we write next about: from n/a through = 1.0.3...

7.1CVSS7.2AI score0.00158EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/24 12:00 a.m.•23 views

PT-2025-3397

Name of the Vulnerable Software and Affected Versions NodeBB version 3.11.0 Description A persistent cross-site scripting XSS issue allows remote attackers to store arbitrary code in the 'about me' section of their profile. This enables attackers to execute malicious scripts on the website...

4.6CVSS6.3AI score0.39265EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/24 12:00 a.m.•8 views

CVE-2024-57041: Improper Neutralization of Input During Web Page Generation

A persistent cross-site scripting XSS vulnerability in NodeBB v3.11.0 allows remote attackers to store arbitrary code in the 'about me' section of their profile...

4.6CVSS6AI score0.39265EPSS
SaveExploits1References4
Mend
Mend
•added 2025/01/24 12:00 a.m.•6 views

CVE-2024-57041

A persistent cross-site scripting XSS vulnerability in NodeBB v3.11.0 allows remote attackers to store arbitrary code in the 'about me' section of their profile...

5.1CVSS0.39265EPSS
SaveExploits1References7
NVD
NVD
•added 2024/12/29 5:15 p.m.•30 views

CVE-2024-13017

A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/aboutus.php of the component About Us Page. The manipulation of the argument title leads to cross site scripting. The attack c...

6.1CVSS0.00413EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2024/12/29 5:15 p.m.•17 views

CVE-2024-13017

A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/aboutus.php of the component About Us Page. The manipulation of the argument title leads to cross site scripting. The attack c...

6.1CVSS3.8AI score0.00413EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/12/29 5:00 p.m.•18 views

CVE-2024-13017 PHPGurukul Maid Hiring Management System About Us Page aboutus.php cross site scripting

A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/aboutus.php of the component About Us Page. The manipulation of the argument title leads to cross site scripting. The attack c...

5.1CVSS6.4AI score0.00413EPSS
SaveExploits0References4
CVE
CVE
•added 2024/12/29 5:00 p.m.•70 views

CVE-2024-13017

PHPGurukul Maid Hiring Management System 1.0 is affected by a cross-site scripting vulnerability in /admin/aboutus.php via the title parameter. The issue is exploitable remotely (network vector) and described as requiring user interaction in some sources, with the impact limited to the affected p...

6.1CVSS3.7AI score0.00413EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2024/12/29 5:00 p.m.•45 views

CVE-2024-13017 PHPGurukul Maid Hiring Management System About Us Page aboutus.php cross site scripting

A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/aboutus.php of the component About Us Page. The manipulation of the argument title leads to cross site scripting. The attack c...

5.1CVSS0.00413EPSS
SaveExploits0References4
Rows per page
Query Builder