CVE-2025-13155

creationtimestamp| type| source ---|---|--- 2025-12-10 15:27:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7nep4hmzo2c 2025-12-10 16:33:46+00:00| seen| https://gist.github.com/Darkcrai86/d923db5881663fb3ec471d919947e30a 2025-12-10 17:37:09+00:00| seen|...

CVE-2024-13155

creationtimestamp| type| source ---|---|--- 2025-02-20 10:36:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lim3tnehwk2u 2025-02-20 10:38:19+00:00| seen| https://t.me/cvedetector/18519 2025-02-20 23:26:54+00:00| seen| Telegram/HsoU9F2ilqhIzwE4z7rDrGwjoK5XfqSjE0Wvp9333NDsh3eG...

CVE-2024-13155

The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Transparent Split Hero widget in all versions up to, and including, 1.5.140 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

CVE-2024-13155 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.140 - Authenticated (Contributor+) Stored Cross-Site Scripting via Transparent Split Hero Widget

The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Transparent Split Hero widget in all versions up to, and including, 1.5.140 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

CVE-2024-13155 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.140 - Authenticated (Contributor+) Stored Cross-Site Scripting via Transparent Split Hero Widget

The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Transparent Split Hero widget in all versions up to, and including, 1.5.140 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

CVE-2024-13155

CVE-2024-13155 affects Unlimited Elements For Elementor (WordPress) up to version 1.5.140, with a Stored XSS via the Transparent Split Hero widget. Exploitation requires authenticated access (contributor+); an attacker can inject scripts that run when users load injected pages. Patch guidance fro...

CVE-2020-13155

creationtimestamp| type| source ---|---|--- 2024-04-25 22:24:54+00:00| seen| https://t.me/arpsyndicate/4881...

CVE-2020-13155

clearsystem.php in NukeViet 4.4 allows CSRF with resultant HTML injection via the deltype parameter to the admin/index.php?nv=webtools&op=clearsystem URI...

CVE-2020-13155

CVE-2020-13155 concerns a CSRF vulnerability in the NukeViet 4.4 product, where the request to CSRF via clearsystem.php can inject HTML when the deltype parameter is used in the URI admin/index.php?nv=webtools&op=clearsystem. The affected component is the clearsystem functionality in NukeViet 4.4...

CVE-2019-13155

An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi exploitable with authentication via the IP Address in Add Virtual Server...

CVE-2019-13155

TRENDnet TEW-827DRU firmware before 2.05B11 contains a command-injection vulnerability in apply.cgi exploitable with authentication via the IP Address in Add Virtual Server. Affected component: router firmware (TEW-827DRU). Root cause: input handling in Add Virtual Server allows execution of arbi...

CVE-2018-13155

The CVE-2018-13155 issue affects GEMCHAIN (GEM) — a smart contract-based Ethereum token. The root cause is a numeric overflow in the mintToken function that lets the contract owner set any user’s balance to an arbitrary value. Publicly available sources in the connected documents describe the vul...