Lucene search
K

2340 matches found

CVE
CVE
added 2025/11/11 3:30 a.m.12 views

CVE-2025-11822

The CVE-2025-11822 vulnerability affects the WordPress plugin WP Bootstrap Tabs (versions ≤ 1.0.4). It is a Stored Cross-Site Scripting (XSS) via the bootstrap_tab shortcode caused by insufficient input sanitization and output escaping of user attributes. Impact: authenticated attackers with cont...

6.4CVSS4.7AI score0.00237EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/11/11 12:0 a.m.1 views

WordPress plugin WP Bootstrap Tabs 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin ... A cross-sit...

6.4CVSS5.8AI score0.00237EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.2 views

PT-2025-46252

Name of the Vulnerable Software and Affected Versions WP Bootstrap Tabs versions prior to 1.0.5 Description The WP Bootstrap Tabs plugin for WordPress is susceptible to Stored Cross-Site Scripting through the 'bootstrap tab' shortcode. Insufficient input sanitization and output escaping of...

6.4CVSS5.2AI score0.00237EPSS
Exploits0References5
Patchstack
Patchstack
added 2025/11/10 10:32 p.m.5 views

WordPress WP Bootstrap Tabs plugin <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by zakaria in WordPress Plugin WP Bootstrap Tabs versions = 1.0.4...

6.4CVSS5.5AI score0.00237EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/11/05 5:8 a.m.4 views

CVE-2025-11753

The Bootstrap Multi-language Responsive Portfolio plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

4.4CVSS4.9AI score0.0019EPSS
Exploits0References1
NVD
NVD
added 2025/11/04 5:16 a.m.3 views

CVE-2025-11753

The Bootstrap Multi-language Responsive Portfolio plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

4.4CVSS0.0019EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/11/04 12:0 a.m.4 views

PT-2025-44938

Name of the Vulnerable Software and Affected Versions Bootstrap Multi-language Responsive Portfolio versions prior to 1.0 Description The Bootstrap Multi-language Responsive Portfolio plugin for WordPress is susceptible to Stored Cross-Site Scripting through admin settings. Insufficient input...

4.4CVSS5.3AI score0.0019EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/11/04 12:0 a.m.4 views

WordPress plugin Bootstrap Multi-language Responsive Portfolio 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

4.4CVSS5.8AI score0.0019EPSS
Exploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2025/10/29 10:24 a.m.5 views

Security Bulletin: CVE-2023-39417 - Extension script @substitutions@ within quoting allow SQL injection

Summary IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct dollar quoting, '', or "". If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker...

8.8CVSS8.3AI score0.01572EPSS
Exploits0Affected Software1
Veracode
Veracode
added 2025/10/21 7:46 p.m.5 views

Privilege Escalation

PyInstaller is vulnerable to Privilege Escalation. The vulnerability is due to the bootstrap process appending a special entry to sys.path and attempting to load an optional bytecode-decryption module while that entry is present, which allows an attacker who can create files/directories next to t...

7CVSS7.8AI score0.00114EPSS
Exploits0References4Affected Software1
GithubExploit
GithubExploit
added 2025/10/19 2:15 p.m.876 views

Exploit for Cross-site Scripting in Getbootstrap Bootstrap

Bootstrap-before-3.4.1 ✅ Yes, that’s correct. This is a k...

6.1CVSS5.7AI score0.1686EPSS
Exploits1
CNVD
CNVD
added 2025/10/13 12:0 a.m.5 views

WordPress Epic Bootstrap Buttons plugin cross-site scripting vulnerability

WordPress Epic Bootstrap Buttons plugin is a plugin for quickly adding Bootstrap style buttons to your WordPress website. WordPress Epic Bootstrap Buttons plugin suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of icol parameters, whic...

6.4CVSS6.1AI score0.00211EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2021-2370

Malware in sbrugna...

6.1CVSS6.1AI score0.02332EPSS
Exploits1References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-6628

Malware in sbrugna...

7.5CVSS7.6AI score0.01305EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-6098

Malware in sbrugna...

5.4CVSS5.6AI score0.00545EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2021-2417

Malware in sbrugna...

6.1CVSS6.2AI score0.01341EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-0995

Malware in sbrugna...

6.1CVSS6.1AI score0.01717EPSS
Exploits0References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-4819

Malware in sbrugna...

7.8CVSS7.5AI score0.00568EPSS
Exploits1References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2021-0849

Malware in sbrugna...

5.4CVSS5.4AI score0.00941EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-2230

Malware in sbrugna...

6.1CVSS6.6AI score0.0152EPSS
Exploits0References5
Rows per page
Query Builder