Lucene search
+L

40 matches found

Cvelist
Cvelist
added 2023/10/27 7:45 a.m.31 views

CVE-2023-46194 WordPress Archivist – Custom Archive Templates Plugin <= 1.7.5 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin = 1.7.5 versions...

5.8CVSS6.1AI score0.00294EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/10/27 12:0 a.m.7 views

WordPress plugin Archivist - Custom Archive Templates Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.1CVSS6.1AI score0.00294EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
added 2023/10/27 12:0 a.m.14 views

Archivist – Custom Archive Templates <= 1.7.5 - Reflected XSS

Description The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS5.7AI score0.00294EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/10/27 12:0 a.m.8 views

PT-2023-29895 · Unknown · Eric Teubert Archivist – Custom Archive Templates

Name of the Vulnerable Software and Affected Versions: Eric Teubert Archivist – Custom Archive Templates plugin versions 1.7.5 and earlier Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website...

6.1CVSS6.3AI score0.00294EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2023/10/18 12:0 a.m.15 views

WordPress Archivist – Custom Archive Templates Plugin <= 1.7.7 is vulnerable to Cross Site Scripting (XSS)

Software Archivist – Custom Archive Templates Type Plugin Vulnerable versions = 1.7.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-46194 Patch priority Medium CVSS severity Medium 5.8 Developer Claim ownership PSID 9eaf34517c88 Credit...

6.1CVSS5.6AI score0.00294EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2023/05/22 3:15 p.m.10 views

CVE-2023-25448

Cross-Site Request Forgery CSRF vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin = 1.7.4 versions...

8.8CVSS6.5AI score0.00248EPSS
SaveExploits0References1
OSV
OSV
added 2023/05/22 3:15 p.m.5 views

CVE-2023-25448

Cross-Site Request Forgery CSRF vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin = 1.7.4 versions...

8.8CVSS7.3AI score0.00248EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/22 3:15 p.m.18 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin = 1.7.4 versions...

6.8CVSS8.7AI score0.00248EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/05/22 2:20 p.m.17 views

CVE-2023-25448 WordPress Archivist – Custom Archive Templates Plugin <= 1.7.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin = 1.7.4 versions...

5.4CVSS9AI score0.00248EPSS
SaveExploits0References1
CVE
CVE
added 2023/05/22 2:20 p.m.43 views

CVE-2023-25448

CVE-2023-25448 affects the WordPress plugin “Archivist – Custom Archive Templates” (versions

8.8CVSS7.1AI score0.00248EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/05/22 12:0 a.m.4 views

WordPress plugin Archivist – Custom Archive Templates 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

8.8CVSS8.2AI score0.00248EPSS
SaveExploits0References2
NVD
NVD
added 2023/04/25 12:15 p.m.10 views

CVE-2023-25490

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin = 1.7.4 versions...

5.9CVSS5.4AI score0.00369EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/25 12:15 p.m.4 views

CVE-2023-25490

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin = 1.7.4 versions...

4.8CVSS6.6AI score0.00369EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/04/25 11:46 a.m.29 views

CVE-2023-25490 WordPress Archivist – Custom Archive Templates Plugin <= 1.7.4 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin = 1.7.4 versions...

5.9CVSS5.5AI score0.00369EPSS
SaveExploits0References1
CVE
CVE
added 2023/04/25 11:46 a.m.36 views

CVE-2023-25490

CVE-2023-25490 concerns the WordPress plugin Archivist – Custom Archive Templates (versions

5.9CVSS4.9AI score0.00369EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/04/25 12:0 a.m.4 views

WordPress plugin Archivist – Custom Archive Templates 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

5.9CVSS6.4AI score0.00369EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/04/25 12:0 a.m.7 views

PT-2023-20109 · WordPress · Eric Teubert Archivist – Custom Archive Templates

Name of the Vulnerable Software and Affected Versions: Eric Teubert Archivist – Custom Archive Templates plugin versions 1.7.4 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For...

5.9CVSS5.3AI score0.00369EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2023/02/15 12:0 a.m.14 views

WordPress Archivist – Custom Archive Templates Plugin <= 1.7.4 is vulnerable to Cross Site Scripting (XSS)

Software Archivist – Custom Archive Templates Type Plugin Vulnerable versions = 1.7.4 Fixed in 1.7.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25490 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 476e9981867e Credits...

5.9CVSS5.8AI score0.00369EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2023/02/15 12:0 a.m.20 views

Archivist - Custom Archive Templates < 1.7.5 - Stored XSS via CSRF

The plugin does not have CSRF when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

8.8CVSS6AI score0.00248EPSS
SaveExploits0Affected Software1
Snyk
Snyk
added 2020/04/17 12:0 a.m.2 views

Malicious Package

Overview archivistclient is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...

8CVSS6.9AI score
SaveExploits0References2
Rows per page
Query Builder