Lucene search
+L

30 matches found

CNNVD
CNNVD
added 2024/02/10 12:0 a.m.8 views

WordPress Plugin Click To Tweet Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

6.5CVSS8.4AI score0.00346EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
added 2024/02/04 12:0 a.m.8 views

Click To Tweet <= 2.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The Click To Tweet plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.0.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to...

4.9CVSS5.7AI score0.00346EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/01/30 12:0 a.m.7 views

WordPress Click To Tweet Plugin <= 2.0.14 is vulnerable to Cross Site Scripting (XSS)

Software Click To Tweet Type Plugin Vulnerable versions = 2.0.14 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-23514 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID dfb01ad116d2 Credits Ngô Thiên An ancorn from VNPT-VCI Requir...

6.5CVSS6.5AI score0.00346EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/02 8:42 a.m.17 views

CVE-2023-41856 WordPress Click To Tweet Plugin <= 2.0.14 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in ClickToTweet.Com Click To Tweet plugin = 2.0.14 versions...

7.1CVSS5.8AI score0.00331EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/10/02 8:42 a.m.29 views

CVE-2023-41856 WordPress Click To Tweet Plugin <= 2.0.14 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in ClickToTweet.Com Click To Tweet plugin = 2.0.14 versions...

7.1CVSS6.3AI score0.00331EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/10/02 12:0 a.m.7 views

WordPress Plugin Click To Tweet Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS5.9AI score0.00331EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/10/02 12:0 a.m.13 views

PT-2023-28122 · WordPress · Click To Tweet

Name of the Vulnerable Software and Affected Versions: Click To Tweet plugin versions = 2.0.14 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to...

7.1CVSS6.2AI score0.00331EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2023/09/05 12:0 a.m.11 views

WordPress Click To Tweet Plugin <= 2.0.14 is vulnerable to Broken Access Control

Software Click To Tweet Type Plugin Vulnerable versions = 2.0.14 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-41857 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID f40dee426497 Credits thiennv Required privilege...

6.9AI score0.00412EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/09/05 12:0 a.m.17 views

WordPress Click To Tweet Plugin <= 2.0.14 is vulnerable to Cross Site Scripting (XSS)

Software Click To Tweet Type Plugin Vulnerable versions = 2.0.14 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-41856 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a4c8c362a5de Credits thiennv Required...

7.1CVSS5.9AI score0.00331EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2022/04/27 12:0 a.m.28 views

WordPress Better Click To Tweet plugin <= 5.10.1 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered in WordPress Better Click To Tweet plugin versions = 5.10.1. Solution Update the WordPress Better Click To Tweet plugin to the latest available version at least 5.10.2...

2.3AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder