CVE-2026-48320

creationtimestamp| type| source ---|---|--- 2026-07-14 23:33:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnelqe7pw25 2026-07-15 18:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpeqzsbtx2y 2026-07-16 18:37:07+00:00| seen|...

CVE-2026-48320

CVE-2026-48320 affects Adobe ColdFusion. The vulnerability is a reflected Cross-Site Scripting (XSS) issue in the web context, enabling an attacker to inject malicious scripts into pages viewed by victims. Exploitation requires user interaction (victim opens a crafted file) and the impact can aff...

CVE-2023-48320

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebDorado SpiderVPlayer allows Stored XSS.This issue affects SpiderVPlayer: from n/a through 1.5.22...

CVE-2022-48320

Cross-site Request Forgery CSRF in Tribe29's Checkmk = 2.1.0p17, Checkmk = 2.0.0p31, and all versions of Checkmk 1.6.0 EOL allow an attacker to add new visual elements to multiple pages...

CVE-2023-48320

creationtimestamp| type| source ---|---|--- 2023-12-21 11:37:03+00:00| seen| https://t.me/ctinow/157620...

CVE-2023-48320

CVE-2023-48320 (SpiderVPlayer) is a Stored XSS in WebDorado SpiderVPlayer up to version 1.5.22 due to improper input neutralization during web page generation. Exploitation requires administrator privileges; impact is stored scripts in pages viewed by users. remediation: upgrade to a version late...

CVE-2023-48320 WordPress Video Player Plugin <= 1.5.22 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebDorado SpiderVPlayer allows Stored XSS.This issue affects SpiderVPlayer: from n/a through 1.5.22...

WordPress Video Player Plugin <= 1.5.22 is vulnerable to Cross Site Scripting (XSS)

Software Video Player Type Plugin Vulnerable versions = 1.5.22 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-48320 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 90d3d469b500 Credits SeungYongLee Required privilege...

CVE-2022-48320

Cross-site Request Forgery CSRF in Tribe29's Checkmk = 2.1.0p17, Checkmk = 2.0.0p31, and all versions of Checkmk 1.6.0 EOL allow an attacker to add new visual elements to multiple pages...

CVE-2022-48320

Cross-site Request Forgery CSRF in Tribe29's Checkmk = 2.1.0p17, Checkmk = 2.0.0p31, and all versions of Checkmk 1.6.0 EOL allow an attacker to add new visual elements to multiple pages...

CVE-2022-48320 CSRF in add-visual endpoint

Cross-site Request Forgery CSRF in Tribe29's Checkmk = 2.1.0p17, Checkmk = 2.0.0p31, and all versions of Checkmk 1.6.0 EOL allow an attacker to add new visual elements to multiple pages...

CVE-2022-48320

CVE-2022-48320 describes a Cross-site Request Forgery (CSRF) in Tribe29’s Checkmk affecting versions &lt;= 2.1.0p17,

CVE-2022-48320 CSRF in add-visual endpoint

Cross-site Request Forgery CSRF in Tribe29's Checkmk = 2.1.0p17, Checkmk = 2.0.0p31, and all versions of Checkmk 1.6.0 EOL allow an attacker to add new visual elements to multiple pages...