Lucene search
K

16 matches found

Nuclei
Nuclei
added yesterday28 views

WordPress Ad Inserter <2.7.10 - Cross-Site Scripting

WordPress Ad Inserter plugin before 2.7.10 contains a cross-site scripting vulnerability. It does not sanitize and escape the htmlelementselection parameter before outputting it back in the page. id: CVE-2022-0288 info: name: WordPress Ad Inserter 2.7.10 - Cross-Site Scripting author: DhiyaneshDK...

6.1CVSS5.8AI score0.02178EPSS
Exploits2References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-2908

Malicious code in bioql PyPI...

7.1CVSS9.2AI score0.00088EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/02/18 10:26 p.m.8 views

CVE-2025-22680

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Ad Inserter Pro allows Reflected XSS. This issue affects Ad Inserter Pro: from n/a through 2.7.39...

7.1CVSS8.6AI score0.00088EPSS
Exploits0References1
NVD
NVD
added 2025/02/16 11:15 p.m.13 views

CVE-2025-22680

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Ad Inserter Pro allows Reflected XSS. This issue affects Ad Inserter Pro: from n/a through 2.7.39...

7.1CVSS0.00088EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/02/16 10:17 p.m.15 views

CVE-2025-22680 WordPress Ad Inserter Pro plugin <= 2.7.39 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Ad Inserter Pro allows Reflected XSS. This issue affects Ad Inserter Pro: from n/a through 2.7.39...

7.1CVSS0.00088EPSS
Exploits0References1
CVE
CVE
added 2025/02/16 10:17 p.m.85 views

CVE-2025-22680

CVE-2025-22680 corresponds to a Reflected Cross-Site Scripting (XSS) vulnerability in WordPress plugin Ad Inserter Pro, affecting versions up to and including 2.7.39. The CVE entry notes an improper neutralization of input during web page generation, enabling reflected XSS. The core details in co...

7.1CVSS8.6AI score0.00088EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/02/16 10:17 p.m.17 views

CVE-2025-22680 WordPress Ad Inserter Pro plugin <= 2.7.39 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Ad Inserter Pro allows Reflected XSS. This issue affects Ad Inserter Pro: from n/a through 2.7.39...

7.1CVSS7.2AI score0.00088EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/16 12:0 a.m.2 views

WordPress plugin Ad Inserter Pro 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site...

7.1CVSS8.3AI score0.00088EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/02/03 11:34 a.m.3 views

WordPress Ad Inserter Pro plugin <= 2.7.39 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Ad Inserter Pro versions = 2.7.39...

7.1CVSS6.1AI score0.00088EPSS
Exploits0Affected Software1
OSV
OSV
added 2022/04/04 4:15 p.m.3 views

CVE-2022-0901

The Ad Inserter Free and Pro WordPress plugins before 2.7.12 do not sanitise and escape the REQUESTURI before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting in browsers which do not encode characters...

6.1CVSS6.4AI score
Exploits0References2
Prion
Prion
added 2022/04/04 4:15 p.m.16 views

Cross site scripting

The Ad Inserter Free and Pro WordPress plugins before 2.7.12 do not sanitise and escape the REQUESTURI before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting in browsers which do not encode characters...

4.3CVSS6AI score0.00211EPSS
Exploits4References2Affected Software1
Patchstack
Patchstack
added 2022/03/14 12:0 a.m.36 views

WordPress Ad Inserter Pro premium plugin <= 2.7.11 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Taurus Omar in WordPress Ad Inserter Pro premium plugin versions = 2.7.11. Solution Update the WordPress Ad Inserter Pro premium plugin to the latest available version at least 2.7.12...

6.1CVSS2.5AI score0.00211EPSS
Exploits4References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/02/21 11:15 a.m.3 views

CVE-2022-0288

The Ad Inserter WordPress plugin before 2.7.10, Ad Inserter Pro WordPress plugin before 2.7.10 do not sanitise and escape the htmlelementselection parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.3AI score0.02178EPSS
Exploits2References3
NVD
NVD
added 2022/02/21 11:15 a.m.13 views

CVE-2022-0288

The Ad Inserter WordPress plugin before 2.7.10, Ad Inserter Pro WordPress plugin before 2.7.10 do not sanitise and escape the htmlelementselection parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

6.1CVSS0.02178EPSS
Exploits2References1
OSV
OSV
added 2022/02/21 11:15 a.m.2 views

CVE-2022-0288

The Ad Inserter WordPress plugin before 2.7.10, Ad Inserter Pro WordPress plugin before 2.7.10 do not sanitise and escape the htmlelementselection parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.4AI score0.02178EPSS
Exploits2References1
Patchstack
Patchstack
added 2022/01/24 12:0 a.m.39 views

WordPress Ad Inserter Pro premium plugin <= 2.7.8 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Krzysztof Zając in WordPress Ad Inserter Pro premium plugin versions = 2.7.8. Solution Update the WordPress Ad Inserter Pro premium plugin to the latest available version at least 2.7.10...

6.1CVSS2.4AI score0.02178EPSS
Exploits2References3Affected Software1
Rows per page
Query Builder