Lucene search
K

35 matches found

OSV
OSV
added 2024/07/13 6:15 a.m.1 views

CVE-2024-5450

The Bug Library WordPress plugin before 2.1.1 does not check the file type on user-submitted bug reports, allowing an unauthenticated user to upload PHP files...

9.1CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2024/07/13 6:15 a.m.16 views

CVE-2024-5450

The Bug Library WordPress plugin before 2.1.1 does not check the file type on user-submitted bug reports, allowing an unauthenticated user to upload PHP files...

9.1CVSS0.00754EPSS
Exploits1References1
Cvelist
Cvelist
added 2024/07/13 6:0 a.m.18 views

CVE-2024-5450 Bug Library < 2.1.1 - Unauthenticated RCE

The Bug Library WordPress plugin before 2.1.1 does not check the file type on user-submitted bug reports, allowing an unauthenticated user to upload PHP files...

0.00754EPSS
Exploits1References1
CVE
CVE
added 2024/07/13 6:0 a.m.56 views

CVE-2024-5450

CVE-2024-5450 affects the WordPress Bug Library plugin prior to version 2.1.1. The vulnerability arises because the plugin does not validate the file type of files submitted with bug reports, enabling an unauthenticated user to upload PHP files (remote code execution risk). Affected product: Word...

9.1CVSS9.5AI score0.00754EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/07/13 6:0 a.m.12 views

CVE-2024-5450 Bug Library < 2.1.1 - Unauthenticated RCE

The Bug Library WordPress plugin before 2.1.1 does not check the file type on user-submitted bug reports, allowing an unauthenticated user to upload PHP files...

7.1AI score0.00754EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/07/13 12:0 a.m.3 views

WordPress plugin Bug Library security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

9.1CVSS6.9AI score0.00754EPSS
Exploits1References2
OSV
OSV
added 2021/09/10 2:15 p.m.1 views

CVE-2021-38355

The Bug Library WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the successimportcount parameter found in the /bug-library.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.3...

6.1CVSS5.8AI score0.00908EPSS
Exploits1References2
NVD
NVD
added 2021/09/10 2:15 p.m.6 views

CVE-2021-38355

The Bug Library WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the successimportcount parameter found in the /bug-library.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.3...

6.1CVSS0.00908EPSS
Exploits1References2
Prion
Prion
added 2021/09/10 2:15 p.m.12 views

Cross site scripting

The Bug Library WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the successimportcount parameter found in the /bug-library.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.3...

4.3CVSS6.1AI score0.00908EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2021/09/10 1:34 p.m.41 views

CVE-2021-38355

CVE-2021-38355 affects the WordPress Bug Library plugin up to version 2.0.3. The vulnerability is a reflected Cross-Site Scripting via the successimportcount parameter in ~/bug-library.php, enabling attackers to inject arbitrary web scripts. Exploitation details are not provided in the supplied d...

6.1CVSS6AI score0.00908EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2021/09/10 1:34 p.m.4 views

CVE-2021-38355 Bug Library <= 2.0.3 Reflected Cross-Site Scripting

The Bug Library WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the successimportcount parameter found in the /bug-library.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.3...

6.1CVSS6.1AI score0.00908EPSS
Exploits1References2
Cvelist
Cvelist
added 2021/09/10 1:34 p.m.16 views

CVE-2021-38355 Bug Library <= 2.0.3 Reflected Cross-Site Scripting

The Bug Library WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the successimportcount parameter found in the /bug-library.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.3...

6.1CVSS6.2AI score0.00908EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/09/10 12:0 a.m.4 views

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress Plugin is an open source application plugin for WordPress. WordPress Bug Library plugin 2.0.3 and previous...

6.1CVSS6.1AI score0.00908EPSS
Exploits1References4
Patchstack
Patchstack
added 2021/09/09 12:0 a.m.14 views

WordPress Bug Library plugin <= 2.0.3 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by p7e4 in WordPress Bug Library plugin versions = 2.0.3. Solution Update the WordPress Bug Library plugin to the latest available version at least 2.0.4...

6.1CVSS2.5AI score0.00908EPSS
Exploits1References3Affected Software1
WPVulnDB
WPVulnDB
added 2021/09/09 12:0 a.m.19 views

Bug Library < 2.0.4 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the via the successimportcount parameter found in the /bug-library.php file which allows attackers to inject arbitrary web scripts...

6.1CVSS4.4AI score0.00908EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder