Lucene search
+L

6 matches found

NVD
NVD
•added 2026/05/10 1:16 p.m.•19 views

CVE-2021-47922

Slider by Soliloquy 2.6.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the title parameter. Attackers can add JavaScript payloads in the title field when creating or editing sliders, which executes in the browsers of...

6.4CVSS0.00243EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/05/10 12:43 p.m.•25 views

CVE-2021-47922 WordPress Plugin Slider by Soliloquy 2.6.2 Stored XSS

Slider by Soliloquy 2.6.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the title parameter. Attackers can add JavaScript payloads in the title field when creating or editing sliders, which executes in the browsers of...

6.4CVSS5.7AI score0.00243EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/12/17 12:00 a.m.•12 views

PT-2024-36593 · WordPress · My Wp Customize Admin/Frontend

Name of the Vulnerable Software and Affected Versions: My WP Customize Admin/Frontend versions prior to 1.24.1 Description: A cross-site scripting issue exists, allowing an arbitrary script to be executed on the web browser of other users who access a page customized by a malicious administrative...

4.8CVSS5.3AI score0.00341EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/17 12:00 a.m.•2 views

CVE-2024-55864: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability exists in My WP Customize Admin/Frontend versions prior to ver 1.24.1. If a malicious administrative user customizes the administrative page with some malicious contents, an arbitrary script may be executed on the web browser of the other users who are accessing...

4.8CVSS5.8AI score0.00341EPSS
SaveExploits0References1
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/12/16 4:57 a.m.•17 views

WordPress Plugin "My WP Customize Admin/Frontend" vulnerable to cross-site scripting

Overview WordPress Plugin "My WP Customize Admin/Frontend" provided by gqevu6bsiz contains a stored cross-site scripting vulnerability CWE-79. The developer reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and the developer coordinated to publish thi...

4.8CVSS6AI score0.00341EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/12/13 12:00 a.m.•11 views

WordPress plugin My WP Customize Admin/Frontend 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

4.8CVSS5AI score0.00341EPSS
SaveExploits0References4
Rows per page
Query Builder