Lucene search
+L

1606 matches found

Patchstack
Patchstack
added 2023/04/11 12:0 a.m.15 views

WordPress Stylish Cost Calculator Premium Plugin < 7.9.0 is vulnerable to Cross Site Scripting (XSS)

Software Stylish Cost Calculator Premium Type Plugin Vulnerable versions 7.9.0 Fixed in 7.9.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0983 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 344803b43355 Credits Flaviu...

6.1CVSS5.9AI score0.00458EPSS
SaveExploits2References3Affected Software1
OSV
OSV
added 2023/04/10 2:15 p.m.5 views

CVE-2023-0983

The stylish-cost-calculator-premium WordPress plugin before 7.9.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Stored Cross-Site Scripting which could be used against admins when viewing submissions submitted through the Email Quote Form...

6.1CVSS6.8AI score0.00458EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2023/04/10 1:17 p.m.67 views

CVE-2023-0983 Stylish Cost Calculator Premium < 7.9.0 - Unauthenticated Stored XSS

The stylish-cost-calculator-premium WordPress plugin before 7.9.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Stored Cross-Site Scripting which could be used against admins when viewing submissions submitted through the Email Quote Form...

6.1AI score0.00458EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2023/04/10 12:0 a.m.26 views

WordPress plugin Stylish Cost Calculator Premium 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.1CVSS6.3AI score0.00458EPSS
SaveExploits2References2
OSV
OSV
added 2023/04/07 1:15 p.m.4 views

CVE-2023-29094

Auth. admin+ Stored Cross-site Scripting XSS vulnerability in PI Websolution Product page shipping calculator for WooCommerce plugin = 1.3.20 versions...

4.8CVSS6.6AI score0.00369EPSS
SaveExploits0References1
Prion
Prion
added 2023/04/07 1:15 p.m.18 views

Cross site scripting

Auth. admin+ Stored Cross-site Scripting XSS vulnerability in PI Websolution Product page shipping calculator for WooCommerce plugin = 1.3.20 versions...

4.3CVSS4.9AI score0.00369EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/04/07 12:59 p.m.29 views

CVE-2023-29094 WordPress Product page shipping calculator for WooCommerce Plugin <= 1.3.20 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-site Scripting XSS vulnerability in PI Websolution Product page shipping calculator for WooCommerce plugin = 1.3.20 versions...

5.9CVSS5.6AI score0.00369EPSS
SaveExploits0References1
NVD
NVD
added 2023/03/31 12:15 p.m.29 views

CVE-2023-1771

A vulnerability was found in SourceCodester Grade Point Average GPA Calculator 1.0 and classified as problematic. Affected by this issue is the function getscale of the file Master.php. The manipulation of the argument perc leads to cross site scripting. The attack may be launched remotely. The...

6.1CVSS4.4AI score0.00549EPSS
SaveExploits1References3
OSV
OSV
added 2023/03/31 12:15 p.m.8 views

CVE-2023-1770

A vulnerability has been found in SourceCodester Grade Point Average GPA Calculator 1.0 and classified as critical. Affected by this vulnerability is the function getscale of the file Master.php. The manipulation of the argument perc leads to sql injection. The attack can be launched remotely. Th...

9.8CVSS6.5AI score0.00738EPSS
SaveExploits1References3
NVD
NVD
added 2023/03/31 12:15 p.m.24 views

CVE-2023-1770

A vulnerability has been found in SourceCodester Grade Point Average GPA Calculator 1.0 and classified as critical. Affected by this vulnerability is the function getscale of the file Master.php. The manipulation of the argument perc leads to sql injection. The attack can be launched remotely. Th...

9.8CVSS7.4AI score0.00738EPSS
SaveExploits1References3
OSV
OSV
added 2023/03/31 12:15 p.m.8 views

CVE-2023-1771

A vulnerability was found in SourceCodester Grade Point Average GPA Calculator 1.0 and classified as problematic. Affected by this issue is the function getscale of the file Master.php. The manipulation of the argument perc leads to cross site scripting. The attack may be launched remotely. The...

6.1CVSS3.8AI score0.00549EPSS
SaveExploits1References3
Prion
Prion
added 2023/03/31 12:15 p.m.21 views

Sql injection

A vulnerability has been found in SourceCodester Grade Point Average GPA Calculator 1.0 and classified as critical. Affected by this vulnerability is the function getscale of the file Master.php. The manipulation of the argument perc leads to sql injection. The attack can be launched remotely. Th...

6.5CVSS9.7AI score0.00738EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2023/03/31 12:15 p.m.19 views

Cross site scripting

A vulnerability was found in SourceCodester Grade Point Average GPA Calculator 1.0 and classified as problematic. Affected by this issue is the function getscale of the file Master.php. The manipulation of the argument perc leads to cross site scripting. The attack may be launched remotely. The...

4CVSS6AI score0.00549EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2023/03/31 11:31 a.m.94 views

CVE-2023-1771

CVE-2023-1771 affects SourceCodester Grade Point Average GPA Calculator 1.0. The vulnerability resides in the get_scale function of Master.php, where manipulating the perc argument triggers cross-site scripting. The issue is exploitable remotely and, per multiple sources, the exploit has been dis...

6.1CVSS4.8AI score0.00549EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/03/31 11:31 a.m.26 views

CVE-2023-1771 SourceCodester Grade Point Average GPA Calculator Master.php get_scale cross site scripting

A vulnerability was found in SourceCodester Grade Point Average GPA Calculator 1.0 and classified as problematic. Affected by this issue is the function getscale of the file Master.php. The manipulation of the argument perc leads to cross site scripting. The attack may be launched remotely. The...

4CVSS6.2AI score0.00549EPSS
SaveExploits1References3
OSV
OSV
added 2023/03/31 11:15 a.m.5 views

CVE-2023-1769

A vulnerability, which was classified as problematic, was found in SourceCodester Grade Point Average GPA Calculator 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page with the input php://filter/read=convert.base64-encode/resource=gradetable leads t...

7.5CVSS5.4AI score0.00642EPSS
SaveExploits0References3
NVD
NVD
added 2023/03/31 11:15 a.m.20 views

CVE-2023-1769

A vulnerability, which was classified as problematic, was found in SourceCodester Grade Point Average GPA Calculator 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page with the input php://filter/read=convert.base64-encode/resource=gradetable leads t...

7.5CVSS5.2AI score0.00642EPSS
SaveExploits0References3
Prion
Prion
added 2023/03/31 11:15 a.m.23 views

Information disclosure

A vulnerability, which was classified as problematic, was found in SourceCodester Grade Point Average GPA Calculator 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page with the input php://filter/read=convert.base64-encode/resource=gradetable leads t...

4CVSS7.4AI score0.00642EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2023/03/31 11:0 a.m.65 views

CVE-2023-1770

CVE-2023-1770 affects SourceCodester Grade Point Average GPA Calculator 1.0. The vulnerability is in the Master.php file’s get_scale function, where manipulating the perc argument leads to SQL injection. A remote attacker can exploit this, and public exploitation has been disclosed per the entry....

9.8CVSS8.3AI score0.00738EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/03/31 11:0 a.m.33 views

CVE-2023-1770 SourceCodester Grade Point Average GPA Calculator Master.php get_scale sql injection

A vulnerability has been found in SourceCodester Grade Point Average GPA Calculator 1.0 and classified as critical. Affected by this vulnerability is the function getscale of the file Master.php. The manipulation of the argument perc leads to sql injection. The attack can be launched remotely. Th...

6.5CVSS10AI score0.00738EPSS
SaveExploits1References3
Rows per page
Query Builder