Lucene search
K

18 matches found

Nuclei
Nuclei
added 8 hours ago25 views

WordPress 2kb Amazon Affiliates Store <2.1.1 - Cross-Site Scripting

WordPress 2kb Amazon Affiliates Store plugin before 2.1.1 contains multiple cross-site scripting vulnerabilities. The plugin allows an attacker to inject arbitrary web script or HTML via the 1 page parameter or 2 kbAction parameter in the kbAmz page to wp-admin/admin.php, thus making possible the...

6.1CVSS6AI score0.00147EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-6123

Malware in sbrugna...

6.1CVSS6.3AI score0.00147EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-44214

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.00218EPSS
Exploits0References1
OSV
OSV
added 2022/12/04 11:15 p.m.0 views

CVE-2022-40968

Reflected Cross-Site Scripting XSS vulnerability in 2kb Amazon Affiliates Store plugin =2.1.5 on WordPress...

6.1CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2022/12/04 11:15 p.m.18 views

CVE-2022-40968

Reflected Cross-Site Scripting XSS vulnerability in 2kb Amazon Affiliates Store plugin =2.1.5 on WordPress...

6.1CVSS0.00218EPSS
Exploits0References1
CVE
CVE
added 2022/12/04 10:3 p.m.75 views

CVE-2022-40968

CVE-2022-40968 describes a vulnerability in the WordPress plugin “2kb Amazon Affiliates Store” version

6.1CVSS5.5AI score0.00218EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/12/04 10:3 p.m.16 views

CVE-2022-40968 WordPress 2kb Amazon Affiliates Store Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)

Reflected Cross-Site Scripting XSS vulnerability in 2kb Amazon Affiliates Store plugin =2.1.5 on WordPress...

4.8CVSS6.1AI score0.00218EPSS
Exploits0References1
WPVulnDB
WPVulnDB
added 2022/12/04 12:0 a.m.20 views

2kb Amazon Affiliates Store <= 2.1.5 - Reflected XSS

Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

6.1CVSS5.6AI score0.00218EPSS
Exploits0
CNNVD
CNNVD
added 2022/12/04 12:0 a.m.4 views

WordPress plugin 2kb Amazon Affiliates Store 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.1CVSS5.9AI score0.00218EPSS
Exploits0References3
OSV
OSV
added 2017/09/28 1:29 a.m.1 views

CVE-2017-14622

Multiple cross-site scripting XSS vulnerabilities in the 2kb Amazon Affiliates Store plugin before 2.1.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter or 2 kbAction parameter in the kbAmz page to wp-admin/admin.php...

6.1CVSS5.8AI score
Exploits0References3
Prion
Prion
added 2017/09/28 1:29 a.m.19 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the 2kb Amazon Affiliates Store plugin before 2.1.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter or 2 kbAction parameter in the kbAmz page to wp-admin/admin.php...

4.3CVSS6.1AI score0.00147EPSS
Exploits1References3Affected Software1
Patchstack
Patchstack
added 2017/09/28 12:0 a.m.8 views

WordPress 2kb Amazon Affiliates Store plugin <=2.1.0 - Authenticated Cross-Site Scripting (XSS) vulnerability

Authenticated Cross-Site Scripting XSS vulnerability found by Ricardo in WordPress 2kb Amazon Affiliates Store plugin versions =2.1.0. Solution Update the WordPress 2kb Amazon Affiliates Store plugin to the latest available version at least 2.1.1...

3.3AI score
Exploits0References1Affected Software1
CNVD
CNVD
added 2017/09/28 12:0 a.m.2 views

WordPress 2kb Amazon Affiliates Store Plugin Has Multiple Cross-Site Scripting Vulnerabilities

WordPress is a set of blogging platform developed in PHP language by WordPress Software Foundation, which supports setting up personal blog sites on servers with PHP and MySQL.2kb Amazon Affiliates Store plugin is one of the Amazon Store plugins. Multiple cross-site scripting vulnerabilities exis...

6.1CVSS6.1AI score0.00147EPSS
Exploits1References1
WPVulnDB
WPVulnDB
added 2017/09/28 12:0 a.m.23 views

2kb Amazon Affiliates Store <= 2.1.0 - Authenticated Cross-Site Scripting (XSS)

Description The 2kb Amazon Affiliates Store WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...

6.1CVSS6.1AI score0.00147EPSS
Exploits1References2
CVE
CVE
added 2017/09/27 5:0 p.m.74 views

CVE-2017-14622

The WordPress plugin 2kb Amazon Affiliates Store (versions before 2.1.1) contains multiple cross-site scripting (XSS) vulnerabilities. An attacker can inject arbitrary script or HTML via the kbAmz page parameters (page or kbAction) sent to wp-admin/admin.php, potentially theft of cookie-based cre...

6.1CVSS6.1AI score0.00147EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2017/09/27 5:0 p.m.22 views

CVE-2017-14622

Multiple cross-site scripting XSS vulnerabilities in the 2kb Amazon Affiliates Store plugin before 2.1.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter or 2 kbAction parameter in the kbAmz page to wp-admin/admin.php...

6.2AI score0.00147EPSS
Exploits1References3
0day.today
0day.today
added 2017/09/21 12:0 a.m.25 views

WordPress 2kb Amazon Affiliates Store 2.1.0 Cross Site Scripting Vulnerability

WordPress 2kb Amazon Affiliates Store plugin versions 2.1.0 and below suffer from a cross site scripting vulnerability. WordPress 2kb Amazon Affiliates Store 2.1.0 Cross Site Scripting Vulnerability Class Input Validation Error CVE Remote Yes Reflected Yes Credit rsanchezr Vulnerable 2kb amazon...

6.7AI score
Exploits0
Packet Storm
Packet Storm
added 2017/09/20 12:0 a.m.30 views

WordPress 2kb Amazon Affiliates Store 2.1.0 Cross Site Scripting

Class Input Validation Error CVE Remote Yes Reflected Yes Credit rsanchezr Vulnerable 2kb amazon affiliates store WP plugin 2kb amazon affiliates store WP plugin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage...

0.1AI score
Exploits0
Rows per page
Query Builder