Lucene search
+L

32 matches found

Circl
Circl
added 2022/02/24 10:14 p.m.14 views

CVE-2022-24709

creationtimestamp| type| source ---|---|--- 2022-02-24 22:14:51+00:00| seen| https://t.me/cibsecurity/38041...

8.8CVSS7AI score0.00692EPSS
SaveExploits0References1
NVD
NVD
added 2022/02/24 8:15 p.m.33 views

CVE-2022-24709

@awsui/components-react is the main AWS UI package which contains React components, with TypeScript definitions designed for user interface development. Multiple components in versions before 3.0.367 have been found to not properly neutralize user input and may allow for javascript injection. Use...

8.8CVSS0.00692EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/02/24 7:55 p.m.9 views

CVE-2022-24709 Cross site scripting in @awsui/components-react

@awsui/components-react is the main AWS UI package which contains React components, with TypeScript definitions designed for user interface development. Multiple components in versions before 3.0.367 have been found to not properly neutralize user input and may allow for javascript injection. Use...

8.8CVSS7.7AI score0.00692EPSS
SaveExploits0References2
Circl
Circl
added 2021/10/11 2:24 p.m.14 views

CVE-2021-24709

creationtimestamp| type| source ---|---|--- 2021-10-11 14:24:42+00:00| seen| https://t.me/cibsecurity/30326...

4.8CVSS4.9AI score0.00617EPSS
SaveExploits2References1
OSV
OSV
added 2021/10/11 11:15 a.m.9 views

CVE-2021-24709

The Weather Effect WordPress plugin before 1.3.6 does not properly validate and escape some of its settings like sizeleaf, flakesleaf, speed which could lead to Stored Cross-Site Scripting issues...

4.8CVSS5.8AI score0.00617EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2021/10/11 10:45 a.m.31 views

CVE-2021-24709 Weather Effect < 1.3.6 - Admin+ Stored Cross-Site Scripting

The Weather Effect WordPress plugin before 1.3.6 does not properly validate and escape some of its settings like sizeleaf, flakesleaf, speed which could lead to Stored Cross-Site Scripting issues...

5.1AI score0.00617EPSS
SaveExploits2References1
CVE
CVE
added 2021/10/11 10:45 a.m.77 views

CVE-2021-24709

CVE-2021-24709 affects the Weather Effect WordPress plugin prior to 1.3.6. The underlying issue is insufficient validation/escaping of certain settings (eg *_size_leaf, *_flakes_leaf, *_speed), leading to Stored Cross-Site Scripting. Public sources (WPScan, PatchStack) reference admin+ and stored...

4.8CVSS4.8AI score0.00617EPSS
SaveExploits2References1Affected Software1
OSV
OSV
added 2020/10/28 8:15 p.m.15 views

CVE-2020-24709

Cross Site Scripting XSS vulnerability in Gophish through 0.10.1 via a crafted landing page or email template...

5.4CVSS5.8AI score
SaveExploits0References1
NVD
NVD
added 2020/10/28 8:15 p.m.23 views

CVE-2020-24709

Cross Site Scripting XSS vulnerability in Gophish through 0.10.1 via a crafted landing page or email template...

5.4CVSS5.2AI score0.00557EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2020/10/28 7:33 p.m.23 views

CVE-2020-24709

Cross Site Scripting XSS vulnerability in Gophish through 0.10.1 via a crafted landing page or email template...

5.2AI score0.00557EPSS
SaveExploits1References1
CVE
CVE
added 2020/10/28 7:33 p.m.50 views

CVE-2020-24709

The CVE-2020-24709 entry concerns Gophish

5.4CVSS5.2AI score0.00557EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
added 2020/03/31 12:00 a.m.8 views

File upload vulnerability exists in OurPHP (CNVD-2020-24709)

OurPHP is an enterprise e-commerce website builder. A file upload vulnerability exists in OurPHP, which can be exploited by attackers to gain control of a web server...

7.2AI score
SaveExploits0
Rows per page
Query Builder