Lucene search
+L

81 matches found

RedhatCVE
RedhatCVE
•added 2025/03/29 12:06 p.m.•27 views

CVE-2025-30904

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Chartify chart-builder allows Stored XSS.This issue affects Chartify: from n/a through = 3.1.7...

5.9CVSS7.2AI score0.00299EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/03/27 11:16 a.m.•17 views

WordPress Chartify plugin <= 3.1.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by astra.r3verii in WordPress Plugin Chartify versions = 3.1.7...

5.9CVSS6.1AI score0.00299EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/03/27 11:15 a.m.•21 views

CVE-2025-30904

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Chartify chart-builder allows Stored XSS.This issue affects Chartify: from n/a through = 3.1.7...

5.9CVSS0.00299EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/03/27 11:15 a.m.•11 views

CVE-2025-30904

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Chartify chart-builder allows Stored XSS.This issue affects Chartify: from n/a through = 3.1.7...

5.9CVSS7.2AI score0.00299EPSS
SaveExploits0References3
CVE
CVE
•added 2025/03/27 10:55 a.m.•72 views

CVE-2025-30904

CVE-2025-30904 is a stored XSS in Chartify (WordPress Chart Plugin). Affected versions are Chartify from n/a up to 3.1.7. The issue stems from improper input neutralization during web page generation, enabling stored cross-site scripting (administrators or higher-privilege users could exploit it)...

5.9CVSS7.2AI score0.00299EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/27 10:55 a.m.•11 views

CVE-2025-30904 WordPress Chartify plugin <= 3.1.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Chartify chart-builder allows Stored XSS.This issue affects Chartify: from n/a through = 3.1.7...

5.9CVSS7.3AI score0.00299EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/27 10:55 a.m.•36 views

CVE-2025-30904 WordPress Chartify plugin <= 3.1.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Chartify chart-builder allows Stored XSS.This issue affects Chartify: from n/a through = 3.1.7...

5.9CVSS0.00299EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/27 12:00 a.m.•4 views

CVE-2025-30904: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Chartify chart-builder allows Stored XSS.This issue affects Chartify: from n/a through = 3.1.7...

5.9CVSS5.8AI score0.00299EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/27 12:00 a.m.•18 views

WordPress plugin Chartify 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS8AI score0.00299EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/02/05 8:27 a.m.•21 views

CVE-2024-47347

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Chartify chart-builder allows Reflected XSS.This issue affects Chartify: from n/a through = 2.7.6...

7.1CVSS5.9AI score0.0032EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 5:02 a.m.•16 views

CVE-2024-10571

The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the executio...

9.8CVSS7.9AI score0.04809EPSS
SaveExploits3References1
zdt
zdt
•added 2025/01/15 12:00 a.m.•187 views

WordPress Chartify 2.9.5 Local File Inclusion Vulnerability

CVE-2024-10571 Chartify – WordPress Chart Plugin = 2.9.5 - Unauthenticated Local File Inclusion via source Description The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This make...

9.8CVSS7AI score0.04809EPSS
SaveExploits3
Packet Storm
Packet Storm
•added 2025/01/14 12:00 a.m.•156 views

WordPress Chartify 2.9.5 Local File Inclusion

WordPress Chartify plugin versions 2.9.5 and below suffers from a local file inclusion vulnerability. CVE-2024-10571 Chartify – WordPress Chart Plugin = 2.9.5 - Unauthenticated Local File Inclusion via source Description The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to...

9.8CVSS9.4AI score0.04809EPSS
SaveExploits3
GithubExploit
GithubExploit
•added 2025/01/13 10:38 a.m.•263 views

Exploit for PHP Remote File Inclusion in Ays-Pro Chartify

CVE-2024-10571 Chartify – WordPress Chart Plugin = 2.9.5 - Un...

9.8CVSS8.3AI score0.04809EPSS
SaveExploits3
OSV
OSV
•added 2024/11/14 11:15 a.m.•16 views

CVE-2024-10571

The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the executio...

9.8CVSS7.8AI score0.04809EPSS
SaveExploits3References2
NVD
NVD
•added 2024/11/14 11:15 a.m.•63 views

CVE-2024-10571

The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the executio...

9.8CVSS0.04809EPSS
SaveExploits3References3
Vulnrichment
Vulnrichment
•added 2024/11/14 11:00 a.m.•20 views

CVE-2024-10571 Chartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via source

The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the executio...

9.8CVSS7.9AI score0.04809EPSS
SaveExploits3References3
Cvelist
Cvelist
•added 2024/11/14 11:00 a.m.•74 views

CVE-2024-10571 Chartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via source

The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the executio...

9.8CVSS0.04809EPSS
SaveExploits3References3
CVE
CVE
•added 2024/11/14 11:00 a.m.•142 views

CVE-2024-10571

The Chartify – WordPress Chart Plugin is vulnerable to Local File Inclusion (LFI) in all versions up to and including 2.9.5 . The flaw exists in the 'source' parameter , which allows unauthenticated attackers to include and execute arbitrary files on the server. This can lead to the execution of ...

9.8CVSS9.9AI score0.04809EPSS
SaveIn wildExploits3References3Affected Software1
Patchstack
Patchstack
•added 2024/11/14 12:27 a.m.•9 views

WordPress Chartify plugin <= 2.9.5 - Unauthenticated Local File Inclusion via source vulnerability

Unauthenticated Local File Inclusion via source vulnerability discovered by abrahack in WordPress Plugin Chartify versions = 2.9.5...

9.8CVSS7AI score0.04809EPSS
SaveExploits3References1Affected Software1
Rows per page
Query Builder