Lucene search
K

11 matches found

Circl
Circl
added 2026/05/20 11:1 a.m.4 views

CVE-2026-45754

creationtimestamp| type| source ---|---|--- 2026-05-20 11:01:54+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbqwngpbt23 2026-05-20 14:15:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmc3qc4eg22q...

5.8AI score
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 12:22 a.m.4 views

CVE-2025-45754

A stored cross-site scripting XSS vulnerability exists in SeedDMS 6.0.32. This vulnerability allows an attacker to inject malicious JavaScript payloads by creating a document with an XSS payload as the document name...

5.4CVSS4.9AI score0.0014EPSS
Exploits1References1
Circl
Circl
added 2025/05/21 5:43 p.m.2 views

CVE-2025-45754

creationtimestamp| type| source ---|---|--- 2025-05-21 17:43:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17163...

5.4CVSS4.8AI score0.0014EPSS
Exploits1References1
NVD
NVD
added 2025/05/21 5:15 p.m.7 views

CVE-2025-45754

A stored cross-site scripting XSS vulnerability exists in SeedDMS 6.0.32. This vulnerability allows an attacker to inject malicious JavaScript payloads by creating a document with an XSS payload as the document name...

5.4CVSS0.0014EPSS
Exploits1References1
CVE
CVE
added 2025/05/21 12:0 a.m.40 views

CVE-2025-45754

SeedDMS 6.0.32 is affected by a stored XSS vulnerability: an attacker can inject JavaScript by using an XSS payload as a document name. The CVSS v3.1 vector is CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N with a base score of 5.4 (Medium). Exploitation details beyond creating a document name are ...

5.4CVSS4.9AI score0.0014EPSS
Exploits1References1Affected Software1
Circl
Circl
added 2024/10/12 1:5 a.m.2 views

CVE-2024-45754

creationtimestamp| type| source ---|---|--- 2024-10-12 01:05:55+00:00| seen| https://t.me/cvedetector/7753...

7.2CVSS4.8AI score0.00174EPSS
Exploits0References1
CVE
CVE
added 2024/10/11 12:0 a.m.52 views

CVE-2024-45754

Technical details about CVE-2024-45754 are not publicly available in the provided connected documents. Monitor for updates.

7.2CVSS7.8AI score0.00174EPSS
Exploits0References3
OSV
OSV
added 2023/10/25 6:17 p.m.1 views

CVE-2023-45754

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in I Thirteen Web Solution Easy Testimonial Slider and Form allows Stored XSS.This issue affects Easy Testimonial Slider and Form: from n/a through 1.0.18...

4.8CVSS7.3AI score0.00134EPSS
Exploits0References1
CVE
CVE
added 2023/10/24 11:31 a.m.57 views

CVE-2023-45754

CVE-2023-45754 : A stored Cross-Site Scripting (XSS) flaw in the WordPress plugin “Easy Testimonial Slider and Form” (versions ≤ 1.0.18). The root cause is improper input neutralization during web page generation, enabling an attacker (with administrator privileges per PatchStack/Wordfence contex...

5.9CVSS6.5AI score0.00134EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2023/10/12 12:0 a.m.9 views

WordPress Easy Testimonial Slider and Form Plugin <= 1.0.18 is vulnerable to Cross Site Scripting (XSS)

Software Easy Testimonial Slider and Form Type Plugin Vulnerable versions = 1.0.18 Fixed in 1.0.19 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-45754 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 10c1fae73b88 Credits Rio...

5.9CVSS5.8AI score0.00134EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2021/06/25 12:0 a.m.7 views

Ec-Cube cross-site scripting vulnerability (CNVD-2021-45754)

Ec-Cube is an open source system for creating shopping websites. A cross-site scripting vulnerability exists in Ec-Cube. An attacker can exploit this vulnerability by tricking an administrator or user into visiting a specially crafted page and performing certain actions to execute arbitrary scrip...

6.1CVSS6.5AI score0.00591EPSS
Exploits0References1
Rows per page
Query Builder