Lucene search
K

13 matches found

RedhatCVE
RedhatCVE
added 2025/02/06 2:52 a.m.5 views

CVE-2025-23706

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in milordk Jet Skinner for BuddyPress jet-skinner-for-buddypress allows Reflected XSS.This issue affects Jet Skinner for BuddyPress: from n/a through = 1.2.5...

7.1CVSS7.2AI score0.00112EPSS
Exploits0References1
NVD
NVD
added 2025/01/22 3:15 p.m.5 views

CVE-2025-23706

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in milordk Jet Skinner for BuddyPress jet-skinner-for-buddypress allows Reflected XSS.This issue affects Jet Skinner for BuddyPress: from n/a through = 1.2.5...

7.1CVSS0.00112EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/22 2:29 p.m.17 views

CVE-2025-23706 WordPress Jet Skinner for BuddyPress plugin <= 1.2.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in milordk Jet Skinner for BuddyPress jet-skinner-for-buddypress allows Reflected XSS.This issue affects Jet Skinner for BuddyPress: from n/a through = 1.2.5...

7.1CVSS0.00112EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/22 2:29 p.m.6 views

CVE-2025-23706 WordPress Jet Skinner for BuddyPress plugin <= 1.2.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in milordk Jet Skinner for BuddyPress jet-skinner-for-buddypress allows Reflected XSS.This issue affects Jet Skinner for BuddyPress: from n/a through = 1.2.5...

7.1CVSS8.6AI score0.00112EPSS
Exploits0References1
Circl
Circl
added 2023/05/23 5:17 p.m.1 views

CVE-2023-23706

creationtimestamp| type| source ---|---|--- 2023-05-23 17:17:24+00:00| seen| https://t.me/cibsecurity/64619...

8.8CVSS8.6AI score0.00106EPSS
Exploits0References1
NVD
NVD
added 2023/05/23 1:15 p.m.9 views

CVE-2023-23706

Cross-Site Request Forgery CSRF vulnerability in miniOrange WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin = 7.5.14 versions...

8.8CVSS5.8AI score0.00106EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/05/23 12:41 p.m.13 views

CVE-2023-23706 WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Plugin <= 7.5.14 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in miniOrange WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin = 7.5.14 versions...

4.3CVSS9AI score0.00106EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/05/23 12:41 p.m.7 views

CVE-2023-23706 WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Plugin <= 7.5.14 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in miniOrange WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin = 7.5.14 versions...

4.3CVSS7.1AI score0.00106EPSS
Exploits0References1
CVE
CVE
added 2023/05/23 12:41 p.m.73 views

CVE-2023-23706

CVE-2023-23706 affects the WordPress plugin MiniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) , specifically versions

8.8CVSS6.5AI score0.00106EPSS
Exploits0References1Affected Software1
Wordfence Blog
Wordfence Blog
added 2023/02/23 4:30 p.m.177 views

Wordfence Intelligence CE Weekly Vulnerability Report (Feb 13, 2023 to Feb 19, 2023)

Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence Community Edition. This database is continuously updated, maintained, and populated by Wordfences highly credentialed and experienced...

0.1AI score0.69269EPSS
Exploits21
Patchstack
Patchstack
added 2023/02/15 12:0 a.m.10 views

WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Plugin <= 7.5.14 is vulnerable to Cross Site Request Forgery (CSRF)

Software WordPress Social Login and Register Discord, Google, Twitter, LinkedIn Type Plugin Vulnerable versions = 7.5.14 Fixed in 7.6.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-23706 Patch priority Low CVSS severity Low 4.3 Developer Claim...

8.8CVSS6.6AI score0.00106EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2022/05/17 8:1 p.m.80 views

CVE-2022-23706

Summary: CVE-2022-23706 is a remote cross-site scripting (XSS) vulnerability in HP Enterprise OneView, affecting versions prior to 7.0. The NVD entry indicates a patch/update is available from HP to resolve the vulnerability. The connected records consistently reference this XSS issue in HPE OneV...

6.1CVSS5.9AI score0.003EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/07/15 9:55 p.m.62 views

CVE-2020-23706

CVE-2020-23706 is a heap-based buffer overflow in the ok-file-formats project, triggered in the function ok_jpg_decode_block_subsequent_scan() (ok_jpg.c:1102) and exploitable by a crafted JPEG file to cause a Denial of Service. Affected versions are those with the vulnerable code up to 2020-06-26...

6.5CVSS6.4AI score0.0033EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder