Lucene search
+L

16 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2014-1276

Malware in sbrugna...

6.1CVSS4.7AI score0.00401EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2012-1039

Malware in sbrugna...

8.8CVSS5.1AI score0.00352EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/05/22 12:14 p.m.•19 views

CVE-2012-10017

A vulnerability was found in BestWebSoft Portfolio Plugin up to 2.04 on WordPress. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 2.06 is able to addres...

8.8CVSS6.8AI score0.00352EPSS
SaveExploits0References1
NVD
NVD
•added 2023/12/26 3:15 p.m.•31 views

CVE-2014-125109

A vulnerability was found in BestWebSoft Portfolio Plugin up to 2.27. It has been declared as problematic. This vulnerability affects the function bwsaddmenurender of the file bwsmenu/bwsmenu.php. The manipulation of the argument bwsmnformemail leads to cross site scripting. The attack can be...

6.1CVSS0.00401EPSS
SaveExploits0References3
Prion
Prion
•added 2023/12/26 3:15 p.m.•26 views

Cross site scripting

A vulnerability was found in BestWebSoft Portfolio Plugin up to 2.27. It has been declared as problematic. This vulnerability affects the function bwsaddmenurender of the file bwsmenu/bwsmenu.php. The manipulation of the argument bwsmnformemail leads to cross site scripting. The attack can be...

5.8CVSS6.4AI score0.00401EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2023/12/26 3:00 p.m.•41 views

CVE-2014-125109 BestWebSoft Portfolio Plugin bws_menu.php bws_add_menu_render cross site scripting

A vulnerability was found in BestWebSoft Portfolio Plugin up to 2.27. It has been declared as problematic. This vulnerability affects the function bwsaddmenurender of the file bwsmenu/bwsmenu.php. The manipulation of the argument bwsmnformemail leads to cross site scripting. The attack can be...

4CVSS6AI score0.00401EPSS
SaveExploits0References3
NVD
NVD
•added 2023/12/26 10:15 a.m.•24 views

CVE-2012-10017

A vulnerability was found in BestWebSoft Portfolio Plugin up to 2.04 on WordPress. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 2.06 is able to addres...

8.8CVSS0.00352EPSS
SaveExploits0References3
Prion
Prion
•added 2023/12/26 10:15 a.m.•24 views

Cross site request forgery (csrf)

A vulnerability was found in BestWebSoft Portfolio Plugin up to 2.04 on WordPress. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 2.06 is able to addres...

6.8CVSS7.3AI score0.00352EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2023/12/26 10:00 a.m.•37 views

CVE-2012-10017 BestWebSoft Portfolio Plugin cross-site request forgery

A vulnerability was found in BestWebSoft Portfolio Plugin up to 2.04 on WordPress. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 2.06 is able to addres...

5CVSS8.8AI score0.00352EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/12/26 10:00 a.m.•52 views

CVE-2012-10017 BestWebSoft Portfolio Plugin cross-site request forgery

A vulnerability was found in BestWebSoft Portfolio Plugin up to 2.04 on WordPress. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 2.06 is able to addres...

5CVSS6.8AI score0.00352EPSS
SaveExploits0References3
CVE
CVE
•added 2023/12/26 10:00 a.m.•88 views

CVE-2012-10017

CVE-2012-10017 describes a cross-site request forgery in the BestWebSoft Portfolio Plugin for WordPress versions up to 2.04. The vulnerability is triggered via remote interaction and affects an unspecified part of the plugin; it does not detail the attack vector beyond CSRF. A fix is available in...

8.8CVSS5.7AI score0.00352EPSS
SaveExploits0References3Affected Software1
AlpineLinux
AlpineLinux
•added 2023/12/26 10:00 a.m.•47 views

CVE-2012-10017

A vulnerability was found in BestWebSoft Portfolio Plugin up to 2.04 on WordPress. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 2.06 is able to addres...

8.8CVSS7AI score0.00352EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/26 12:00 a.m.•4 views

CVE-2012-10017: Cross-Site Request Forgery (CSRF)

A vulnerability was found in BestWebSoft Portfolio Plugin up to 2.04 on WordPress. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 2.06 is able to addres...

8.8CVSS5.3AI score0.00352EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/12/26 12:00 a.m.•15 views

PT-2023-10177 · Bestwebsoft · Bestwebsoft Portfolio Plugin

Name of the Vulnerable Software and Affected Versions: BestWebSoft Portfolio Plugin versions up to 2.27 Description: A vulnerability was found in the BestWebSoft Portfolio Plugin, affecting the function bws add menu render of the file bws menu/bws menu.php. The manipulation of the argument bwsmn...

6.1CVSS4.2AI score0.00401EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2023/12/26 12:00 a.m.•15 views

WordPress Plugin BestWebSoft Portfolio Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.1CVSS6.1AI score0.00401EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/26 12:00 a.m.•3 views

CVE-2014-125109: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in BestWebSoft Portfolio Plugin up to 2.27. It has been declared as problematic. This vulnerability affects the function bwsaddmenurender of the file bwsmenu/bwsmenu.php. The manipulation of the argument bwsmnformemail leads to cross site scripting. The attack can be...

6.1CVSS3.6AI score0.00401EPSS
SaveExploits0References3
Rows per page
Query Builder