Lucene search
K

9 matches found

Patchstack
Patchstack
added 2024/07/03 6:23 a.m.2 views

WordPress alfred24 Click & Collect plugin <= 1.1.7 - Malicious Polyfill.io Embed vulnerability

Malicious Polyfill.io Embed vulnerability discovered by Sansec.io in WordPress Plugin alfred24 Click & Collect versions = 1.1.7...

7AI score
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/07/03 12:0 a.m.5 views

WordPress alfred24 Click & Collect Plugin <= 1.1.7 is vulnerable to Backdoor

Software alfred24 Click & Collect Type Plugin Vulnerable versions = 1.1.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID cf5f2b39e0cf Credits Sansec.io Required privilege Unauthenticated Published 3...

7.2AI score
Exploits0References2Affected Software1
OSV
OSV
added 2023/04/24 3:15 p.m.0 views

CVE-2022-47158

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Pakpobox alfred24 Click & Collect plugin = 1.1.7 versions...

4.8CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2023/04/24 3:15 p.m.8 views

CVE-2022-47158

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Pakpobox alfred24 Click & Collect plugin = 1.1.7 versions...

5.9CVSS5.4AI score0.00207EPSS
Exploits0References1
Prion
Prion
added 2023/04/24 3:15 p.m.14 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Pakpobox alfred24 Click & Collect plugin = 1.1.7 versions...

4.3CVSS4.8AI score0.00207EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/04/24 2:16 p.m.37 views

CVE-2022-47158

The CVE-2022-47158 entry concerns a stored XSS vulnerability in the Pakpobox alfred24 Click & Collect WordPress plugin (versions

5.9CVSS4.9AI score0.00207EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/24 2:16 p.m.6 views

CVE-2022-47158 WordPress alfred24 Click & Collect Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Pakpobox alfred24 Click & Collect plugin = 1.1.7 versions...

5.9CVSS5.6AI score0.00207EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/04/24 12:0 a.m.0 views

WordPress plugin alfred24 Click & Collect 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

5.9CVSS4.9AI score0.00207EPSS
Exploits0References2
Patchstack
Patchstack
added 2023/01/13 12:0 a.m.8 views

WordPress alfred24 Click & Collect Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)

Software alfred24 Click & Collect Type Plugin Vulnerable versions = 1.1.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-47158 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID bd2c86c67b0a Credits Team WeBoB...

5.9CVSS5.8AI score0.00207EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder