Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/03/14 7:56 p.m.10 views

CVE-2025-2078

The BlogBuzzTime for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissio...

4.8CVSS5.7AI score0.00077EPSS
Exploits0References1
NVD
NVD
added 2025/03/12 4:15 a.m.8 views

CVE-2025-2078

The BlogBuzzTime for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissio...

4.8CVSS0.00077EPSS
Exploits0References2
OSV
OSV
added 2025/03/12 4:15 a.m.0 views

CVE-2025-2078

The BlogBuzzTime for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissio...

4.8CVSS7.3AI score0.00077EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/03/12 3:21 a.m.6 views

CVE-2025-2078 BlogBuzzTime-for-wp <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting

The BlogBuzzTime for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissio...

4.4CVSS4.3AI score0.00077EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/03/12 3:21 a.m.16 views

CVE-2025-2078 BlogBuzzTime-for-wp <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting

The BlogBuzzTime for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissio...

4.4CVSS0.00077EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/03/12 12:0 a.m.3 views

PT-2025-10993 · WordPress · Blogbuzztime

Name of the Vulnerable Software and Affected Versions: BlogBuzzTime for WP plugin for WordPress versions up to, and including, 1.1 Description: The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient input sanitization and output escaping. This allows...

4.8CVSS7.9AI score0.00077EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/03/12 12:0 a.m.2 views

WordPress plugin BlogBuzzTime for WP 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

4.8CVSS8.2AI score0.00077EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/03/11 11:22 p.m.2 views

WordPress BlogBuzzTime-for-wp plugin <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by siyuan shao in WordPress Plugin BlogBuzzTime for WP versions = 1.1...

4.8CVSS6.8AI score0.00077EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder