Lucene search
K

5 matches found

Vulnrichment
Vulnrichment
added 2024/02/01 10:22 a.m.21 views

CVE-2023-51674 WordPress Advanced Access Manager Plugin <= 6.9.18 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More allows Stored XSS.This issue affects Advanced Access Manager – Restricted Content, Users & Roles, Enhance...

6.5CVSS6.7AI score0.00065EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/02/01 12:0 a.m.1 views

PT-2024-14234 · Unknown · Aam Advanced Access Manager

Name of the Vulnerable Software and Affected Versions: AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More versions through 6.9.18 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site...

6.5CVSS6.1AI score0.00065EPSS
Exploits0References7
OSV
OSV
added 2023/12/29 2:15 p.m.3 views

CVE-2023-51675

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More.This issue affects Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More: from n/a through 6.9.18...

5.4CVSS7.3AI score0.00189EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/12/29 12:0 a.m.1 views

PT-2023-31878 · WordPress · Aam Advanced Access Manager

Name of the Vulnerable Software and Affected Versions: AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More versions n/a through 6.9.18 Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability...

5.4CVSS6.2AI score0.00189EPSS
Exploits0References8
Patchstack
Patchstack
added 2023/12/27 12:0 a.m.6 views

WordPress Advanced Access Manager Plugin <= 6.9.18 is vulnerable to Cross Site Scripting (XSS)

Software Advanced Access Manager Type Plugin Vulnerable versions = 6.9.18 Fixed in 6.9.19 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-51674 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d0b729b8e72c Credits LVT-tholv2k Required privile...

6.5CVSS6.9AI score0.00065EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder