Lucene search
+L

1277 matches found

Positive Technologies
Positive Technologies
added 2025/02/03 12:0 a.m.11 views

PT-2025-4961 · Unknown · Google Map With Fancybox

Name of the Vulnerable Software and Affected Versions: Google Map With Fancybox versions prior to 2.1.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for Cross-site Scripting XSS. Specifically, it enables Reflected XSS...

7.1CVSS9.5AI score0.00303EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/02/03 12:0 a.m.4 views

WordPress plugin Google Map With Fancybox 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

7.1CVSS7.6AI score0.00303EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/23 4:15 p.m.10 views

CVE-2025-23540

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mohsin Khan WP Front-end login and register wp-front-end-login-and-register allows Reflected XSS.This issue affects WP Front-end login and register: from n/a through = 2.1.0...

7.1CVSS0.0025EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/23 3:29 p.m.67 views

CVE-2025-22768

CVE-2025-22768 – CSRF in the Rocket Media Library Mime Type WordPress plugin enables Stored XSS in versions up to 2.1.0. CVSS v3.1 base score 7.1 (HIGH). Exploitation details are not provided in the connected documents; remediation details in the sources indicate a fix beyond 2.1.0, but the exact...

7.1CVSS7.2AI score0.00146EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/23 12:0 a.m.6 views

PT-2025-4687 · Unknown · Qwerty23 Rocket Media Library Mime Type

Name of the Vulnerable Software and Affected Versions: Qwerty23 Rocket Media Library Mime Type versions prior to 2.1.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended...

7.1CVSS9.4AI score0.00146EPSS
SaveExploits0References4
NVD
NVD
added 2025/01/22 4:15 p.m.18 views

CVE-2025-23809

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sunil Nanda Blue Wrench Video Widget blue-wrench-videos-widget allows Reflected XSS.This issue affects Blue Wrench Video Widget: from n/a through = 2.1.0...

7.1CVSS0.00265EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/22 3:42 p.m.61 views

CVE-2025-23809

CVE-2025-23809 describes a Reflected XSS in the NotFound Blue Wrench Video Widget (affecting Blue Wrench Video Widget: from n/a through 2.1.0). The vulnerability arises from improper neutralization of input during web page generation. CVSS v3.1 vector: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L with bas...

7.1CVSS7.2AI score0.00265EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/22 12:0 a.m.8 views

Jenkins plugin Bitbucket Server Integration 跨站请求伪造漏洞

Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security vulnerability in...

8.8CVSS6.4AI score0.0029EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/01/16 8:7 p.m.24 views

CVE-2025-23909 WordPress Compare Ninja plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Common Ninja Compare Ninja compare-ninja-comparison-tables allows Stored XSS.This issue affects Compare Ninja: from n/a through = 2.1.0...

6.5CVSS0.00363EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/16 12:0 a.m.3 views

PT-2025-5188 · Unknown · Compare Ninja

Name of the Vulnerable Software and Affected Versions: Compare Ninja versions prior to 2.1.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an attacker can inject malicious scripts...

6.5CVSS9AI score0.00363EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/01/15 3:23 p.m.12 views

CVE-2025-22734 WordPress Posts Footer Manager Plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Data443 Risk Mitigation, Inc. Posts Footer Manager intelly-posts-footer-manager allows Stored XSS.This issue affects Posts Footer Manager: from n/a through = 2.1.0...

5.9CVSS8.6AI score0.0028EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/15 12:0 a.m.8 views

WordPress plugin Posts Footer Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS7.7AI score0.0028EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/15 12:0 a.m.8 views

WordPress plugin Octrace Support 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS7.7AI score0.00227EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/01/14 5:5 p.m.8 views

WordPress Posts Footer Manager Plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Pham Van Tam Patchstack Alliance in WordPress Plugin Posts Footer Manager versions = 2.1.0...

5.9CVSS6.1AI score0.0028EPSS
SaveExploits0Affected Software1
CBLMariner
CBLMariner
added 2025/01/12 9:15 a.m.53 views

CVE-2017-5836 affecting package libplist 2.1.0-4

CVE-2017-5836 affecting package libplist 2.1.0-4. No patch is available currently...

7.5CVSS7.7AI score0.02657EPSS
SaveExploits0
OSV
OSV
added 2025/01/09 7:15 p.m.5 views

CVE-2024-13248

Incorrect Privilege Assignment vulnerability in Drupal Private content allows Target Influence via Framing.This issue affects Private content: from 0.0.0 before 2.1.0...

5.5CVSS5.8AI score0.00186EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/01/09 12:0 a.m.28 views

Amazon Linux AMI : expat (ALAS-2025-1953)

The version of expat installed on the remote host is prior to 2.1.0-15.35. It is, therefore, affected by a vulnerability as referenced in the ALAS-2025-1953 advisory. An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XMLParseBuffer. CVE-2024-45490...

9.8CVSS6.9AI score0.01686EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.5 views

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal Private content prior to version 2.1.0, which stems from the inclusion of a permission assignment error vulnerability...

5.5CVSS6.7AI score0.00186EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/08 8:40 a.m.100 views

CVE-2024-54676

CVE-2024-54676 affects Apache OpenMeetings (2.1.0 up to 8.0.0, multiple entries across feeds). The issue is deserialization of untrusted data in cluster mode due to clustering instructions not specifying OpenJPA white/blacklists. Affected users are advised to upgrade to OpenMeetings 8.0.0 and to ...

9.8CVSS6.6AI score0.65176EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2025/01/06 7:0 p.m.4 views

WordPress CC Canadian Mortgage Calculator plugin <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin CC Canadian Mortgage Calculator versions = 2.1.0...

6.4CVSS5.7AI score0.00309EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder