Lucene search
K

5 matches found

OSV
OSV
added 2021/10/15 1:15 p.m.0 views

CVE-2021-39332

The Business Manager WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization found throughout the plugin which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 1.4.5. This...

4.8CVSS5.8AI score0.00421EPSS
Exploits0References1
Prion
Prion
added 2021/10/15 1:15 p.m.7 views

Cross site scripting

The Business Manager WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization found throughout the plugin which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 1.4.5. This...

2.1CVSS4.8AI score0.00421EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2021/10/15 12:15 p.m.6 views

CVE-2021-39332 Business Manager – WordPress ERP, HR, CRM, and Project Management Plugin <= 1.4.5 Authenticated Stored Cross-Site Scripting

The Business Manager WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization found throughout the plugin which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 1.4.5. This...

5.5CVSS5.8AI score0.00421EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/10/15 12:0 a.m.1 views

WordPress 插件 跨站脚本漏洞

WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the WordPress plugin that stems from insufficient input validation and cleanup in the Business Manager plugin, which makes it vulnerable to stored cross-site scripting, allowing an...

5.5CVSS5.1AI score0.00421EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2021/10/15 12:0 a.m.2 views

PT-2021-22538

Name of the Vulnerable Software and Affected Versions: Business Manager WordPress plugin versions up to and including 1.4.5 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input validation and sanitization throughout the plugin. This allows attackers with...

5.5CVSS5.5AI score0.00421EPSS
Exploits0References4
Rows per page
Query Builder