Lucene search
K

22 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-40050

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00231EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-53896

Malicious code in bioql PyPI...

6.4CVSS8.7AI score0.00205EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-30619

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00032EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/09/24 6:31 p.m.2 views

CVE-2025-58220

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Techeshta Card Elements for WPBakery card-elements-for-wpbakery allows DOM-Based XSS.This issue affects Card Elements for WPBakery: from n/a through = 1.0.9...

6.5CVSS5.7AI score0.00032EPSS
Exploits0References1
NVD
NVD
added 2025/09/22 7:16 p.m.3 views

CVE-2025-58220

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Techeshta Card Elements for WPBakery card-elements-for-wpbakery allows DOM-Based XSS.This issue affects Card Elements for WPBakery: from n/a through = 1.0.8...

6.5CVSS0.00032EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/09/22 6:52 p.m.5 views

WordPress Card Elements for WPBakery Plugin <= 1.0.8 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by theviper17 in WordPress Plugin Card Elements for WPBakery versions = 1.0.8...

6.5CVSS6AI score0.00032EPSS
Exploits0Affected Software1
Cvelist
Cvelist
added 2025/09/22 6:23 p.m.10 views

CVE-2025-58220 WordPress Card Elements for WPBakery Plugin <= 1.0.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Techeshta Card Elements for WPBakery card-elements-for-wpbakery allows DOM-Based XSS.This issue affects Card Elements for WPBakery: from n/a through = 1.0.8...

6.5CVSS0.00032EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2025/09/22 6:23 p.m.1 views

CVE-2025-58220

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Techeshta Card Elements for WPBakery card-elements-for-wpbakery allows DOM-Based XSS.This issue affects Card Elements for WPBakery: from n/a through = 1.0.8...

6.5CVSS5.8AI score0.00032EPSS
Exploits0References3
CVE
CVE
added 2025/09/22 6:23 p.m.6 views

CVE-2025-58220

CVE-2025-58220 corresponds to Card Elements for WPBakery (WordPress) and is an XSS vulnerability (Stored Cross-Site Scripting) in Card Elements for WPBakery. Affected: Card Elements for WPBakery plugin, evidence shows vulnerable component is Card Elements for WPBakery

6.5CVSS5.2AI score0.00032EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/22 6:23 p.m.3 views

CVE-2025-58220 WordPress Card Elements for WPBakery Plugin <= 1.0.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Techeshta Card Elements for WPBakery card-elements-for-wpbakery allows DOM-Based XSS.This issue affects Card Elements for WPBakery: from n/a through = 1.0.8...

6.5CVSS5.9AI score0.00032EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/22 12:0 a.m.3 views

PT-2025-38886

Name of the Vulnerable Software and Affected Versions Techeshta Card Elements for WPBakery versions through 1.0.8 Description The software contains a flaw related to improper input handling during web page generation, leading to a DOM-Based Cross-site Scripting issue. This allows for the injectio...

6.5CVSS6.7AI score0.00032EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 10:46 a.m.4 views

CVE-2024-43123

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Techeshta Card Elements for Elementor allows Stored XSS.This issue affects Card Elements for Elementor: from n/a through 1.2.2...

6.5CVSS6.8AI score0.00231EPSS
Exploits0
OSV
OSV
added 2025/02/27 10:15 a.m.0 views

CVE-2024-13734

The Card Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Profile Card widget in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

5.4CVSS6AI score
Exploits0References4
NVD
NVD
added 2025/02/27 10:15 a.m.11 views

CVE-2024-13734

The Card Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Profile Card widget in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00205EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/02/27 9:21 a.m.8 views

CVE-2024-13734 Card Elements for Elementor <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Profile Card Widget

The Card Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Profile Card widget in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00205EPSS
Exploits0References4
CVE
CVE
added 2025/02/27 9:21 a.m.34 views

CVE-2024-13734

CVE-2024-13734 affects Card Elements for Elementor (WordPress) up to version 1.2.6. It is a stored XSS via the Profile Card widget, exploitable by authenticated users with contributor+ privileges due to insufficient input sanitization and output escaping. Impact: arbitrary script execution on pag...

6.4CVSS5.7AI score0.00205EPSS
Exploits0References4Affected Software1
CNNVD
CNNVD
added 2025/02/27 12:0 a.m.1 views

WordPress plugin Card Elements for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.4CVSS7.8AI score0.00205EPSS
Exploits0References5
Patchstack
Patchstack
added 2025/02/26 10:53 p.m.1 views

WordPress Card Elements for Elementor plugin <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Profile Card Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Profile Card Widget vulnerability discovered by zer0gh0st in WordPress Plugin Card Elements for Elementor versions = 1.2.6...

6.4CVSS5.8AI score0.00205EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2024/08/12 11:15 p.m.14 views

CVE-2024-43123

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Techeshta Card Elements for Elementor allows Stored XSS.This issue affects Card Elements for Elementor: from n/a through 1.2.2...

6.5CVSS0.00231EPSS
Exploits0References1
CVE
CVE
added 2024/08/12 10:39 p.m.43 views

CVE-2024-43123

CVE-2024-43123: Stored XSS in Techeshta Card Elements for Elementor due to improper input neutralization during web page generation. Affected: Card Elements for Elementor, applicable up to version 1.2.2. Root cause: insufficient sanitization of stored input. Impact: stored script execution if mal...

6.5CVSS6.5AI score0.00231EPSS
Exploits0References1
Rows per page
Query Builder