Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 11:31 p.m.2 views

CVE-2022-1506

The WP Born Babies WordPress plugin through 1.0 does not sanitise and escape some of its fields, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...

5.4CVSS6AI score0.00558EPSS
Exploits2References1
CNVD
CNVD
added 2022/06/13 12:0 a.m.24 views

WordPress WP Born Babies plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress WP Born Babies plugin version 1.0 and prior versions contain a cross-site scripting vulnerability...

5.4CVSS2.2AI score0.00558EPSS
Exploits2References1
OSV
OSV
added 2022/06/08 10:15 a.m.3 views

CVE-2022-1506

The WP Born Babies WordPress plugin through 1.0 does not sanitise and escape some of its fields, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...

5.4CVSS6.1AI score0.00558EPSS
Exploits2References1
ATTACKERKB
ATTACKERKB
added 2022/06/08 10:15 a.m.3 views

CVE-2022-1506

The WP Born Babies WordPress plugin through 1.0 does not sanitise and escape some of its fields, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...

5.4CVSS5.9AI score0.00558EPSS
Exploits2References2
Prion
Prion
added 2022/06/08 10:15 a.m.14 views

Cross site scripting

The WP Born Babies WordPress plugin through 1.0 does not sanitise and escape some of its fields, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...

3.5CVSS5.2AI score0.00558EPSS
Exploits2References1Affected Software1
CNNVD
CNNVD
added 2022/06/08 12:0 a.m.2 views

WordPress plugin WP Born Babies 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress WP Born Babies plugin version 1.0 and prior versions contain a cross-site scripting vulnerability...

5.4CVSS5.6AI score0.00558EPSS
Exploits2References2
CVE
CVE
added 2022/06/06 8:51 a.m.75 views

CVE-2022-1506

Summary: CVE-2022-1506 affects the WordPress plugin “WP Born Babies” (versions ≤ 1.0). The issue is stored Cross‑Site Scripting caused by insufficient sanitisation/escaping of several fields. Documents indicate that an attacker with as low as contributor role could trigger XSS, enabling JavaScrip...

5.4CVSS5.2AI score0.00558EPSS
Exploits2References1Affected Software1
Patchstack
Patchstack
added 2022/05/16 12:0 a.m.22 views

WordPress WP Born Babies plugin <= 1.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Wejdan Alomari in WordPress WP Born Babies plugin versions = 1.0. Solution Deactivate and delete. This plugin has been closed as of April 27, 2022 and is not available for download. This closure is temporary, pending a full...

5.4CVSS2.1AI score0.00558EPSS
Exploits2References3Affected Software1
Rows per page
Query Builder