Lucene search
+L

94 matches found

EUVD
EUVD
•added 2026/09/03 7:52 p.m.•15 views

EUVD-2026-57321

Material for MkDocs: DOM XSS in search suggestions via query parameter...

5.4CVSS5.8AI score0.00327EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•23 views

PT-2026-81223

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The extension allows a request-provided additionalFilters parameter to register a named siteHash filter before the system's own siteHash filter is applied. Becau...

6.3CVSS5.5AI score0.00331EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
•added 2026/08/13 4:21 p.m.•9 views

SUSE CVE-2026-73295

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...

5.4CVSS5.2AI score0.00327EPSS
SaveExploits0References3
NVD
NVD
•added 2026/08/12 5:17 p.m.•15 views

CVE-2026-73295

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...

5.4CVSS0.00327EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/08/12 5:17 p.m.•17 views

CVE-2026-73295

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...

5.4CVSS5AI score0.00327EPSS
SaveExploits0References4
OSV
OSV
•added 2026/08/12 5:17 p.m.•9 views

UBUNTU-CVE-2026-73295

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...

5.4CVSS5.1AI score0.00327EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/08/12 4:15 p.m.•41 views

CVE-2026-73295 Material for MkDocs: DOM XSS in search suggestions via query parameter

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...

5.4CVSS0.00327EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/08/12 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-73295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in...

5.4CVSS6AI score0.00327EPSS
SaveExploits0References3
FreeBSD
FreeBSD
•added 2026/07/17 12:00 a.m.•15 views

py-mkdocs-material -- DOM XSS vulnerability

Martin Donath reports: Material for MkDocs 7.2.0 through 9.7.6 contains a DOM-based cross-site scripting vulnerability in the optional search.suggest feature. A crafted q URL parameter could execute JavaScript in the documentation site's origin after user interaction...

5.3AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/06 7:54 a.m.•15 views

CVE-2026-28104

Missing Authorization vulnerability in Aryan Shirani Bid Abadi Site Suggest site-suggest allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Site Suggest: from n/a through = 1.3.9...

6.5CVSS5.8AI score0.00345EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/05 6:30 a.m.•18 views

EUVD-2026-9759

Missing Authorization vulnerability in Aryan Shirani Bid Abadi Site Suggest site-suggest allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Site Suggest: from n/a through = 1.3.9...

6.5CVSS5.9AI score0.00345EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/05 6:16 a.m.•34 views

CVE-2026-28104

Missing Authorization vulnerability in Aryan Shirani Bid Abadi Site Suggest site-suggest allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Site Suggest: from n/a through = 1.3.9...

6.5CVSS0.00345EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/05 5:54 a.m.•40 views

CVE-2026-28104

CVE-2026-28104 refers to a Missing Authorization vulnerability in the WordPress plugin Site Suggest (Site Suggest, plugin version

6.5CVSS5.8AI score0.00345EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/05 5:54 a.m.•13 views

CVE-2026-28104 WordPress Site Suggest plugin <= 1.3.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Aryan Shirani Bid Abadi Site Suggest site-suggest allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Site Suggest: from n/a through = 1.3.9...

5.8AI score0.00345EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/05 5:54 a.m.•43 views

CVE-2026-28104 WordPress Site Suggest plugin <= 1.3.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Aryan Shirani Bid Abadi Site Suggest site-suggest allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Site Suggest: from n/a through = 1.3.9...

6.5CVSS0.00345EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/05 5:54 a.m.•11 views

CVE-2026-28104

Missing Authorization vulnerability in Aryan Shirani Bid Abadi Site Suggest site-suggest allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Site Suggest: from n/a through = 1.3.9...

5.9AI score0.00345EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/03/05 12:00 a.m.•26 views

WordPress plugin Site Suggest 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

6.5CVSS5.8AI score0.00345EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/05 12:00 a.m.•20 views

PT-2026-23379

Missing Authorization vulnerability in Aryan Shirani Bid Abadi Site Suggest site-suggest allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Site Suggest: from n/a through = 1.3.9...

5.9AI score0.00345EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/05 12:00 a.m.•5 views

CVE-2026-28104: Missing Authorization

Missing Authorization vulnerability in Aryan Shirani Bid Abadi Site Suggest site-suggest allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Site Suggest: from n/a through = 1.3.9...

6.5CVSS5.8AI score0.00345EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/02/26 12:57 p.m.•22 views

WordPress Site Suggest plugin <= 1.3.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Site Suggest versions = 1.3.9...

6.5CVSS5.9AI score0.00345EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder