Lucene search
+L

32047 matches found

Cvelist
Cvelist
•added 2024/12/05 3:23 a.m.•40 views

CVE-2024-10881 LUNA RADIO PLAYER <= 6.24.11.07 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The LUNA RADIO PLAYER plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lunaradio' shortcode in versions up to, and including, 6.24.11.07 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00261EPSS
SaveExploits0References2
CVE
CVE
•added 2024/12/05 3:23 a.m.•71 views

CVE-2024-10881

The CVE: CVE-2024-10881 affects the LUNA RADIO PLAYER WordPress plugin. The vulnerability is a Stored Cross-Site Scripting via the lunaradio shortcode in versions up to and including 6.24.11.07, caused by insufficient input sanitization and output escaping on user-supplied attributes. Impact: aut...

6.4CVSS5.7AI score0.00261EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/12/05 12:00 a.m.•16 views

WordPress plugin LUNA RADIO PLAYER 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS7.6AI score0.00261EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/05 12:00 a.m.•10 views

CVE-2024-10881: Improper Neutralization of Input During Web Page Generation

The LUNA RADIO PLAYER plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lunaradio' shortcode in versions up to, and including, 6.24.11.07 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS6AI score0.00261EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/12/03 11:52 p.m.•13 views

WordPress FV Flowplayer Video Player plugin <= 7.5.47.7212 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library

Authenticated Contributor+ Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library vulnerability discovered by Webbernaut in WordPress Plugin FV Flowplayer Video Player versions = 7.5.47.7212...

6.4CVSS6.1AI score0.00433EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/12/02 2:15 p.m.•54 views

CVE-2024-53713

Cross-Site Request Forgery CSRF vulnerability in rickota Silverlight Video Player smooth-streaming-player allows Stored XSS.This issue affects Silverlight Video Player: from n/a through = 1.0...

7.1CVSS0.00184EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/02 1:48 p.m.•19 views

CVE-2024-53713 WordPress Silverlight Video Player plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Alain Diart for les-sushi-codeurs.fr & Eric Ambrosi for regart.net Silverlight Video Player allows Stored XSS.This issue affects Silverlight Video Player: from n/a through 1.0...

7.1CVSS6.8AI score0.00184EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/02 1:48 p.m.•76 views

CVE-2024-53713

CVE-2024-53713 is a CSRF-to-stored XSS issue in the WordPress Silverlight Video Player plugin (versions

7.1CVSS7.2AI score0.00184EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/02 1:48 p.m.•66 views

CVE-2024-53713 WordPress Silverlight Video Player plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in rickota Silverlight Video Player smooth-streaming-player allows Stored XSS.This issue affects Silverlight Video Player: from n/a through = 1.0...

7.1CVSS0.00184EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/02 12:00 a.m.•22 views

WordPress plugin Silverlight Video Player 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

7.1CVSS8.2AI score0.00184EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/02 12:00 a.m.•9 views

PT-2024-35820

Name of the Vulnerable Software and Affected Versions Silverlight Video Player versions n/a through 1.0 Description The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in the Silverlight Video Player. This means an attacker can execute malicious scripts on the...

7.1CVSS0.00184EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/02 12:00 a.m.•8 views

CVE-2024-53713: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in rickota Silverlight Video Player smooth-streaming-player allows Stored XSS.This issue affects Silverlight Video Player: from n/a through = 1.0...

7.1CVSS5.8AI score0.00184EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/02 12:00 a.m.•7 views

CVE-2024-53779: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in 8bitkid Yahoo! WebPlayer yahoo-media-player allows Stored XSS.This issue affects Yahoo! WebPlayer: from n/a through = 2.0.6...

7.1CVSS5.8AI score0.00158EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/01 10:15 p.m.•30 views

CVE-2024-53747

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nutttaro Video Player for WPBakery video-player-for-wpbakery allows Stored XSS.This issue affects Video Player for WPBakery: from n/a through = 1.0.1...

6.5CVSS0.00239EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/01 9:23 p.m.•43 views

CVE-2024-53747 WordPress Video Player for WPBakery plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nutttaro Video Player for WPBakery video-player-for-wpbakery allows Stored XSS.This issue affects Video Player for WPBakery: from n/a through = 1.0.1...

6.5CVSS0.00239EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/01 9:23 p.m.•32 views

CVE-2024-53747 WordPress Video Player for WPBakery plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nutttaro Video Player for WPBakery video-player-for-wpbakery allows Stored XSS.This issue affects Video Player for WPBakery: from n/a through = 1.0.1...

6.5CVSS8.6AI score0.00239EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/01 12:00 a.m.•14 views

PT-2024-35856 · Unknown · Nutttaro Video Player For Wpbakery

Name of the Vulnerable Software and Affected Versions: NuttTaro Video Player for WPBakery versions n/a through 1.0.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an attacker can...

6.5CVSS8.9AI score0.00239EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/01 12:00 a.m.•4 views

CVE-2024-53747: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nutttaro Video Player for WPBakery video-player-for-wpbakery allows Stored XSS.This issue affects Video Player for WPBakery: from n/a through = 1.0.1...

6.5CVSS5.8AI score0.00239EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/01 12:00 a.m.•14 views

WordPress plugin Video Player for WPBakery 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS8AI score0.00239EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/11/28 11:55 a.m.•16 views

WordPress Video Player for WPBakery plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by theviper17 Patchstack Alliance in WordPress Plugin Video Player for WPBakery versions = 1.0.1...

6.5CVSS6.1AI score0.00239EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder