Lucene search
+L

164 matches found

NVD
NVD
added 2025/12/17 11:15 p.m.7 views

CVE-2023-53932

Serendipity 2.4.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through blog entry creation. Attackers can craft entries with JavaScript payloads that will execute when other users view the compromised blog post...

5.4CVSS0.00208EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/12/17 8:7 a.m.6 views

CVE-2025-65590

nopCommerce 4.90.0 is vulnerable to Cross Site Scripting XSS via the Blog posts functionality in the Content Management area...

5.4CVSS6.3AI score0.00196EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/17 12:0 a.m.11 views

PT-2025-51970

Name of the Vulnerable Software and Affected Versions Serendipity version 2.4.0 Description An authenticated user can inject malicious scripts through blog entry creation. An attacker can create blog entries with JavaScript payloads that execute when other users view the compromised post. This is...

5.4CVSS5.8AI score0.00208EPSS
Exploits1References9
EUVD
EUVD
added 2025/12/16 9:30 p.m.7 views

EUVD-2025-203838

nopCommerce 4.90.0 is vulnerable to Cross Site Scripting XSS via the Blog posts functionality in the Content Management area...

5.4CVSS5.7AI score0.00196EPSS
Exploits0References4
NVD
NVD
added 2025/12/16 7:15 p.m.5 views

CVE-2025-65590

nopCommerce 4.90.0 is vulnerable to Cross Site Scripting XSS via the Blog posts functionality in the Content Management area...

5.4CVSS0.00196EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/12/16 12:0 a.m.35 views

CVE-2025-65590

nopCommerce 4.90.0 is vulnerable to Cross Site Scripting XSS via the Blog posts functionality in the Content Management area...

0.00196EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.7 views

nopCommerce 安全漏洞

nopCommerce is an open source, general purpose e-commerce platform from nopCommerce, Inc. A security vulnerability exists in nopCommerce version 4.90.0, which stems from cross-site scripting in the Blog posts feature in the content management area...

5.4CVSS6.1AI score0.00196EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.7 views

PT-2025-51769

Name of the Vulnerable Software and Affected Versions nopCommerce version 4.90.0 Description The software is susceptible to Cross Site Scripting XSS through the Blog posts functionality within the Content Management area. The issue allows for potential malicious script injection. Recommendations ...

5.4CVSS5.8AI score0.00196EPSS
Exploits0References8
Vulnrichment
Vulnrichment
added 2025/12/16 12:0 a.m.5 views

CVE-2025-65590

nopCommerce 4.90.0 is vulnerable to Cross Site Scripting XSS via the Blog posts functionality in the Content Management area...

5.8AI score0.00196EPSS
Exploits0References2
CVE
CVE
added 2025/12/16 12:0 a.m.11 views

CVE-2025-65590

CVE-2025-65590 affects nopCommerce 4.90.0. The vulnerability is a Cross-Site Scripting (XSS) flaw exploitable via the Blog posts functionality in the Content Management area. The initial report does not provide exact vulnerable component details beyond the Blog posts feature; Red Hat and EUVD mir...

5.4CVSS5.8AI score0.00196EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2025/12/16 12:0 a.m.5 views

CVE-2025-65590

nopCommerce 4.90.0 is vulnerable to Cross Site Scripting XSS via the Blog posts functionality in the Content Management area...

5.4CVSS6.2AI score0.00196EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/10/28 2:38 a.m.14 views

CVE-2025-62958

Cross-Site Request Forgery CSRF vulnerability in Clifton Griffin Simple Content Templates for Blog Posts & Pages simple-post-template allows Cross Site Request Forgery.This issue affects Simple Content Templates for Blog Posts & Pages: from n/a through = 2.2.61...

4.3CVSS6.9AI score0.00129EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/27 3:30 a.m.7 views

EUVD-2025-35985

Cross-Site Request Forgery CSRF vulnerability in Clifton Griffin Simple Content Templates for Blog Posts & Pages simple-post-template allows Cross Site Request Forgery.This issue affects Simple Content Templates for Blog Posts & Pages: from n/a through = 2.2.61...

8.8CVSS6.3AI score0.00129EPSS
Exploits0References2
NVD
NVD
added 2025/10/27 2:15 a.m.14 views

CVE-2025-62958

Cross-Site Request Forgery CSRF vulnerability in Clifton Griffin Simple Content Templates for Blog Posts & Pages simple-post-template allows Cross Site Request Forgery.This issue affects Simple Content Templates for Blog Posts & Pages: from n/a through = 2.2.61...

4.3CVSS0.00129EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/27 1:34 a.m.16 views

CVE-2025-62958 WordPress Simple Content Templates for Blog Posts & Pages plugin <= 2.2.61 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Clifton Griffin Simple Content Templates for Blog Posts & Pages simple-post-template allows Cross Site Request Forgery.This issue affects Simple Content Templates for Blog Posts & Pages: from n/a through = 2.2.61...

4.3CVSS0.00129EPSS
Exploits0References1
CVE
CVE
added 2025/10/27 1:34 a.m.26 views

CVE-2025-62958

CVE-2025-62958 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin “Simple Content Templates for Blog Posts & Pages” (simple-post-template) by Clifton Griffin. The issue affects versions from n/a up to and including 2.2.61. Public sources in the connected documents...

4.3CVSS5.1AI score0.00129EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/27 1:34 a.m.6 views

CVE-2025-62958 WordPress Simple Content Templates for Blog Posts & Pages plugin <= 2.2.61 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Clifton Griffin Simple Content Templates for Blog Posts & Pages simple-post-template allows Cross Site Request Forgery.This issue affects Simple Content Templates for Blog Posts & Pages: from n/a through = 2.2.61...

4.3CVSS5.1AI score0.00129EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/27 12:0 a.m.9 views

WordPress plugin Simple Content Templates for Blog Posts & Pages Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS5.7AI score0.00129EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.11 views

PT-2025-43832

Cross-Site Request Forgery CSRF vulnerability in Clifton Griffin Simple Content Templates for Blog Posts & Pages simple-post-template allows Cross Site Request Forgery.This issue affects Simple Content Templates for Blog Posts & Pages: from n/a through = 2.2.61...

8.8CVSS6.9AI score0.00129EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/10/16 2:53 a.m.10 views

WordPress Simple Content Templates for Blog Posts & Pages plugin <= 2.2.61 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Simple Content Templates for Blog Posts & Pages versions = 2.2.61...

8.8CVSS7AI score0.00129EPSS
Exploits0Affected Software1
Rows per page
Query Builder