Lucene search
+L

1397 matches found

NVD
NVD
added 2025/01/16 9:15 p.m.23 views

CVE-2025-23898

Cross-Site Request Forgery CSRF vulnerability in ivobrett Apply with LinkedIn buttons apply-with-linkedin-buttons allows Stored XSS.This issue affects Apply with LinkedIn buttons: from n/a through = 2.3...

7.1CVSS0.002EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/16 12:0 a.m.5 views

PT-2025-5180 · Ivo Brett · Applymetrics Apply With Linkedin Buttons

Name of the Vulnerable Software and Affected Versions: Ivo Brett – ApplyMetrics Apply with LinkedIn buttons versions n/a through 2.3 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for DOM-Based XS...

6.5CVSS9.2AI score0.00363EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/01/16 12:0 a.m.4 views

WordPress plugin Apply with LinkedIn buttons 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

7.1CVSS8.2AI score0.002EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.4 views

WordPress plugin AI Scribe 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

4.3CVSS8.4AI score0.00202EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/07 12:0 a.m.5 views

WordPress plugin Metadata SEO 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.6AI score0.0034EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/01/06 5:29 p.m.5 views

WordPress SMSA Shipping plugin <= 2.3 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin SMSA Shipping versions = 2.3...

8.6CVSS7AI score0.00515EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
added 2025/01/02 12:0 p.m.14 views

CVE-2023-46632 WordPress My Shortcodes plugin <= 2.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in David Cramer My Shortcodes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Shortcodes: from n/a through 2.3...

7.1CVSS0.00373EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/02 12:0 a.m.3 views

PT-2025-1523 · Unknown · My Shortcodes

Name of the Vulnerable Software and Affected Versions: My Shortcodes versions 2.3 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For My Shortcodes versions 2.3...

7.1CVSS9.4AI score0.00373EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/12/12 12:0 a.m.8 views

XWiki Platform 安全漏洞

XWiki Platform is XWiki's open source suite of Wiki platforms for creating web collaboration applications. A security vulnerability exists in XWiki Platform versions 2.3 through 16.3.0, which originates from the ability of any user with scripting privileges to execute arbitrary remote code by...

9.1CVSS7.3AI score0.01036EPSS
SaveExploits2References4
Positive Technologies
Positive Technologies
added 2024/12/12 12:0 a.m.9 views

PT-2024-36598 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 2.3 through 15.10.8 XWiki Platform versions 16.3.0 before the patch Description: The issue allows any user with script rights to perform arbitrary remote code execution by adding instances of XWiki.ConfigurableClass to...

9.8CVSS8.3AI score0.01036EPSS
SaveExploits2References18
NVD
NVD
added 2024/11/15 11:15 a.m.32 views

CVE-2023-4679

A use after free vulnerability exists in GPAC version 2.3-DEV-revrelease, specifically in the gffilterpacketdel function in filtercore/filter.c at line 38. This vulnerability can lead to a double-free condition, which may cause the application to crash...

5.9CVSS0.00272EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2024/11/15 10:53 a.m.57 views

CVE-2023-4679

A use after free vulnerability exists in GPAC version 2.3-DEV-revrelease, specifically in the gffilterpacketdel function in filtercore/filter.c at line 38. This vulnerability can lead to a double-free condition, which may cause the application to crash...

5.9CVSS5.8AI score0.00272EPSS
SaveExploits1
OSV
OSV
added 2024/10/22 5:51 a.m.11 views

RHSA-2024:5289 Red Hat Security Advisory: mod_auth_openidc:2.3 security update

Bulletin has no description...

7.5CVSS7.5AI score0.01261EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2024/10/18 12:0 a.m.5 views

PT-2024-33379 · Tito · Tito

Name of the Vulnerable Software and Affected Versions: Tito versions n/a through 2.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. Specifically, it allows DOM-Based XSS. Recommendations: For versions n/a...

6.5CVSS6.7AI score0.00257EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2024/10/14 12:0 a.m.13 views

WordPress Tito Plugin <= 2.3 is vulnerable to Cross Site Scripting (XSS)

Software Tito Type Plugin Vulnerable versions = 2.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49241 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2018b376dfd6 Credits theviper17 Required privilege Contributor Published 1...

6.5CVSS6.9AI score0.00257EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/10/01 2:1 p.m.4 views

WordPress Auto Featured Image from Title plugin <= 2.3 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Auto Featured Image from Title versions = 2.3...

6.1CVSS6.3AI score0.00359EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/09/22 4:6 p.m.27 views

RHSA-2013:0562 Red Hat Security Advisory: Red Hat Enterprise MRG Messaging 2.3 security update

Bulletin has no description...

6.8CVSS6.1AI score0.09212EPSS
SaveExploits0References18
OSV
OSV
added 2024/09/22 4:6 p.m.34 views

RHSA-2013:0561 Red Hat Security Advisory: Red Hat Enterprise MRG Messaging 2.3 security update

Bulletin has no description...

6.8CVSS6.1AI score0.09212EPSS
SaveExploits0References58
OSV
OSV
added 2024/09/16 11:42 a.m.31 views

RHSA-2023:6940 Red Hat Security Advisory: mod_auth_openidc:2.3 security and bug fix update

Bulletin has no description...

7.5CVSS5.9AI score0.01327EPSS
SaveExploits0References16
OSV
OSV
added 2024/09/16 6:47 a.m.21 views

RHSA-2022:1823 Red Hat Security Advisory: mod_auth_openidc:2.3 security update

Bulletin has no description...

6.1CVSS6.2AI score0.02364EPSS
SaveExploits2References24
Rows per page
Query Builder