Lucene search
+L

113 matches found

NVD
NVD
•added 2025/01/09 9:15 p.m.•29 views

CVE-2024-13308

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Browser Back Button allows Cross-Site Scripting XSS.This issue affects Browser Back Button: from 1.0.0 before 2.0.2...

3.8CVSS0.00256EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/09 8:27 p.m.•40 views

CVE-2024-13308 Browser Back Button - Moderately critical - Cross site scripting - SA-CONTRIB-2024-072

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Browser Back Button allows Cross-Site Scripting XSS.This issue affects Browser Back Button: from 1.0.0 before 2.0.2...

0.00256EPSS
SaveExploits0References1
OSV
OSV
•added 2025/01/09 8:27 p.m.•10 views

CVE-2024-13308 Browser Back Button - Moderately critical - Cross site scripting - SA-CONTRIB-2024-072

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Browser Back Button allows Cross-Site Scripting XSS.This issue affects Browser Back Button: from 1.0.0 before 2.0.2...

3.8CVSS5.9AI score
SaveExploits0References5
CVE
CVE
•added 2025/01/09 8:27 p.m.•83 views

CVE-2024-13308

The Drupal Browser Back Button module (versions 1.0.0 through 2.0.1 ) is vulnerable to Cross-Site Scripting (XSS) due to a lack of sufficient input neutralization during web page generation. Specifically, the module fails to properly escape text entered by an administrator when rendering the back...

3.8CVSS6.6AI score0.00256EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/01/09 8:27 p.m.•11 views

CVE-2024-13308 Browser Back Button - Moderately critical - Cross site scripting - SA-CONTRIB-2024-072

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Browser Back Button allows Cross-Site Scripting XSS.This issue affects Browser Back Button: from 1.0.0 before 2.0.2...

4.2AI score0.00256EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/09 12:00 a.m.•1 views

CVE-2024-13308: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Browser Back Button allows Cross-Site Scripting XSS.This issue affects Browser Back Button: from 1.0.0 before 2.0.2...

3.8CVSS5.8AI score0.00256EPSS
SaveExploits0References1
OSV
OSV
•added 2024/12/11 7:44 a.m.•15 views

DRUPAL-CONTRIB-2024-072

This module provides a block that renders a link providing the functionality of a browser's back button. The module does not sufficiently escape text entered by an administrator, resulting in a cross scripting vulnerability. This vulnerability is mitigated by the fact that an attacker must have a...

3.8CVSS6.4AI score0.00256EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/12/11 12:00 a.m.•19 views

Drupal Browser Back Button module 1.0.0-2.0.1 - Authenticated Cross Site Scripting (XSS) vulnerability

Authenticated Cross Site Scripting XSS vulnerability discovered by Patrick Fey in WordPress Module Browser Back Button versions 1.0.0-2.0.1...

3.8CVSS6.1AI score0.00256EPSS
SaveExploits0References1Affected Software1
Drupal
Drupal
•added 2024/12/11 12:00 a.m.•29 views

Browser Back Button - Moderately critical - Cross site scripting - SA-CONTRIB-2024-072

This module provides a block that renders a link providing the functionality of a browser's back button. The module does not sufficiently escape text entered by an administrator, resulting in a cross scripting vulnerability. This vulnerability is mitigated by the fact that an attacker must have a...

3.8CVSS6.6AI score0.00256EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/12/04 12:00 a.m.•20 views

PT-2024-10135

Name of the Vulnerable Software and Affected Versions Drupal Browser Back Button versions 1.0.0 through 2.0.2 Description The issue is related to improper neutralization of input during web page generation, which allows Cross-Site Scripting XSS. This can enable a remote attacker to conduct...

5.5CVSS6.2AI score0.00256EPSS
SaveExploits0References13
NVD
NVD
•added 2024/06/03 7:15 a.m.•21 views

CVE-2024-35643

Cross Site Scripting XSS vulnerability in Xabier Miranda WP Back Button allows Stored XSS.This issue affects WP Back Button: from n/a through 1.1.3...

5.9CVSS5.7AI score0.00259EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/06/03 6:50 a.m.•21 views

CVE-2024-35643 WordPress WP Back Button plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability in Xabier Miranda WP Back Button allows Stored XSS.This issue affects WP Back Button: from n/a through 1.1.3...

5.9CVSS5.8AI score0.00259EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/03 12:00 a.m.•3 views

CVE-2024-35643: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Xabier Miranda WP Back Button allows Stored XSS.This issue affects WP Back Button: from n/a through 1.1.3...

5.9CVSS5.8AI score0.00259EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/03 12:00 a.m.•15 views

PT-2024-26590 · WordPress · Xabier Miranda Wp Back Button

Name of the Vulnerable Software and Affected Versions: Xabier Miranda WP Back Button versions 1.1.3 and earlier Description: The issue is a Cross Site Scripting XSS vulnerability, specifically a Stored XSS, in Xabier Miranda WP Back Button. This allows an attacker to inject malicious scripts into...

5.9CVSS5.6AI score0.00259EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2024/05/30 10:02 a.m.•11 views

WordPress WP Back Button plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by alfido osdie Patchstack Alliance in WordPress Plugin WP Back Button versions = 1.1.3...

5.9CVSS6.1AI score0.00259EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/05/30 12:00 a.m.•14 views

WordPress WP Back Button Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)

Software WP Back Button Type Plugin Vulnerable versions = 1.1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-35643 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 90452d019b78 Credits alfido osdie Patchstack Alliance Required...

5.9CVSS6.6AI score0.00259EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2023/12/29 11:15 a.m.•39 views

CVE-2023-51399

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Back Button Widget allows Stored XSS.This issue affects Back Button Widget: from n/a through 1.6.3...

6.5CVSS0.00328EPSS
SaveExploits0References1
OSV
OSV
•added 2023/12/29 11:15 a.m.•15 views

CVE-2023-51399

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Back Button Widget allows Stored XSS.This issue affects Back Button Widget: from n/a through 1.6.3...

5.4CVSS7.3AI score0.00328EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/29 11:15 a.m.•29 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Back Button Widget allows Stored XSS.This issue affects Back Button Widget: from n/a through 1.6.3...

4.9CVSS6.9AI score0.00328EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/12/29 10:20 a.m.•42 views

CVE-2023-51399 WordPress Back Button Widget Plugin <= 1.6.3 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Back Button Widget allows Stored XSS.This issue affects Back Button Widget: from n/a through 1.6.3...

6.5CVSS6.6AI score0.00328EPSS
SaveExploits0References1
Rows per page
Query Builder