Lucene search
K

7610 matches found

CNNVD
CNNVD
added 2024/06/13 12:0 a.m.3 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS5.8AI score0.01781EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/06/13 12:0 a.m.3 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.6AI score0.01781EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/06/13 12:0 a.m.1 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.6AI score0.024EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/06/13 12:0 a.m.3 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.6AI score0.01615EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/06/13 12:0 a.m.2 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.6AI score0.01781EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/06/13 12:0 a.m.1 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.6AI score0.01615EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/06/13 12:0 a.m.3 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.6AI score0.01781EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/06/11 4:26 a.m.17 views

CVE-2024-31401

Cross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.15.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script on the web browser of the user who is logging in to the product...

6.4AI score0.0181EPSS
Exploits0References2
CVE
CVE
added 2024/06/11 4:26 a.m.57 views

CVE-2024-31401

CVE-2024-31401 affects Cybozu Garoon, with vulnerable versions 5.0.0–5.15.2. The issue is a cross-site scripting flaw that allows a remote authenticated attacker with administrative privileges to inject arbitrary scripts into the web browser of a user logging in. Root cause described in sources i...

9CVSS6.4AI score0.0181EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2024/06/11 12:0 a.m.2 views

MeterSphere 跨站脚本漏洞

MeterSphere is MeterSphere open source one-stop open source continuous testing platform. MeterSphere 1.10.1-lts previous versions of cross-site scripting vulnerability , the vulnerability stems from the application of the user-supplied data lack of effective filtering and escaping , an attacker c...

6.1CVSS6.4AI score0.00441EPSS
Exploits1References3
Cvelist
Cvelist
added 2024/06/07 2:28 p.m.17 views

CVE-2024-36773

A cross-site scripting XSS vulnerability in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Themes parameter at index.php...

0.00113EPSS
Exploits1References1
CVE
CVE
added 2024/06/07 2:9 p.m.43 views

CVE-2024-37160

Formwork CVE-2024-37160 concerns the Formwork flat-file CMS. The vulnerability is an XSS flaw exploitable when an administrator modifies site options via /panel/options/site, allowing injection of scripts that can affect visitors across most pages (dashboard excluded). Affected component is descr...

4.8CVSS5.3AI score0.00721EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2024/06/06 9:35 p.m.24 views

CVE-2024-36775

A cross-site scripting XSS vulnerability in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the About Me parameter in the Edit Profile page...

0.0009EPSS
Exploits1References1
OSV
OSV
added 2024/06/06 4:15 a.m.3 views

CVE-2024-4608

The SellKit – Funnel builder and checkout optimizer for WooCommerce to sell more, faster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in all versions up to, and including, 1.9.8 due to insufficient input sanitization and output escaping. This makes it...

5.4CVSS5.9AI score0.00225EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2024/06/05 4:15 p.m.18 views

CVE-2024-20405

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a stored XSS attack by exploiting an RFI vulnerability. This vulnerability is due to insufficient validation of user-supplied input for specific HTTP requests that are...

4.8CVSS6.4AI score0.0086EPSS
Exploits1References1
Cvelist
Cvelist
added 2024/06/05 4:15 p.m.16 views

CVE-2024-20405

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a stored XSS attack by exploiting an RFI vulnerability. This vulnerability is due to insufficient validation of user-supplied input for specific HTTP requests that are...

4.8CVSS5.3AI score0.0086EPSS
Exploits1References1
CVE
CVE
added 2024/06/05 4:15 p.m.62 views

CVE-2024-20405

CVE-2024-20405 affects Cisco Finesse, specifically the web-based management interface. The flaw arises from insufficient input validation for HTTP requests, enabling an unauthenticated, remote attacker to perform a stored XSS by exploiting a remote file inclusion (RFI) vulnerability. A crafted li...

6.1CVSS6.3AI score0.0086EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2024/06/05 12:0 a.m.4 views

WordPress plugin Responsive Addons 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS6AI score0.00233EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/06/04 12:0 a.m.2 views

WordPress plugin Nafeza Prayer Time 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

4.4CVSS6.1AI score0.00288EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/06/04 12:0 a.m.2 views

WordPress plugin Discussion Board 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.4CVSS6AI score0.00257EPSS
Exploits0References2
Rows per page
Query Builder