CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

CVE•added 2026/05/16 3:25 p.m.•10 views

CVE-2020-37237

Summary : CVE-2020-37237 affects Composr CMS 10.0.34. A persistent cross-site scripting (XSS) flaw exists in the banner management interface, enabling authenticated administrators to inject scripts via the Description field in Add banner. Payloads executed for all visitors when they access the ho...

Vulnrichment•added 2026/05/16 3:25 p.m.•7 views

CVE-2020-37237 Composr CMS 10.0.34 Persistent Cross-Site Scripting via banners

EUVD•added 2026/05/16 3:25 p.m.•6 views

EUVD-2020-31241

CNNVD•added 2026/05/16 12:0 a.m.•7 views

Ocproducts Composr CMS 跨站脚本漏洞

Ocproducts Composr CMS is an open-source content management system CMS developed by the British company Ocproducts, written in PHP language. Version Ocproducts Composr CMS 10.0.34 has a cross-site scripting vulnerability. This vulnerability stems from a persistent cross-site script in the banner...

6.4CVSS5.6AI score0.00034EPSS

Positive Technologies•added 2026/05/16 12:0 a.m.•8 views

PT-2026-41437

RedhatCVE•added 2026/02/21 7:29 p.m.•2 views

Exploits0References5

CVE-2026-22354

Deserialization of Untrusted Data vulnerability in Dotstore Woocommerce Category Banner Management banner-management-for-woocommerce allows Object Injection.This issue affects Woocommerce Category Banner Management: from n/a through = 2.5.1...

8.8CVSS5.5AI score0.00071EPSS

NVD•added 2026/02/20 4:22 p.m.•2 views

CVE-2026-22354

8.8CVSS0.00071EPSS

CVE•added 2026/02/20 3:47 p.m.•11 views

CVE-2026-22354

Summary of CVE-2026-22354 (WordPress WooCommerce Banner Management plugin <= 2.5.1): The issue is a PHP object injection due to deserialization of untrusted data in the Banner Management for WooCommerce component. Affected product/version: Banner Management, Product Slider & Carousel for WooCo...

8.8CVSS5.5AI score0.00071EPSS

Vulnrichment•added 2026/02/20 3:47 p.m.•2 views

CVE-2026-22354 WordPress Woocommerce Category Banner Management plugin <= 2.5.1 - PHP Object Injection vulnerability

5.4AI score0.00071EPSS

ATTACKERKB•added 2026/02/20 3:47 p.m.•2 views

CVE-2026-22354

5.4AI score0.00071EPSS

Exploits0References2

Cvelist•added 2026/02/20 3:47 p.m.•22 views

CVE-2026-22354 WordPress Woocommerce Category Banner Management plugin <= 2.5.1 - PHP Object Injection vulnerability

8.8CVSS0.00071EPSS

Positive Technologies•added 2026/02/20 12:0 a.m.•3 views

PT-2026-21201

Name of the Vulnerable Software and Affected Versions Dotstore Woocommerce Category Banner Management versions through 2.5.1 Description The software contains a flaw due to deserialization of untrusted data, which allows for object injection. This issue is present in the Woocommerce Category Bann...

5.6AI score0.00071EPSS

Exploits0References3

CNNVD•added 2026/02/20 12:0 a.m.•4 views

WordPress plugin Woocommerce Category Banner Management 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There we...

8.8CVSS5.8AI score0.00071EPSS