Lucene search
+L

5699 matches found

CNVD
CNVD
added 2019/08/23 12:00 a.m.17 views

WordPress wp-front-end-profile plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress wp-front-end-profile plugin. An attacker can...

6.1CVSS6.3AI score0.00913EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/08/23 12:00 a.m.15 views

WordPress bws-google-maps plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress bws-google-maps plugin. An attacker can exploit...

6.1CVSS6.3AI score0.01384EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/08/23 12:00 a.m.13 views

WordPress content-audit plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress content-audit plugin. An attacker can exploit thi...

6.1CVSS6.3AI score0.00905EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/08/23 12:00 a.m.15 views

Ampache Cross-Site Scripting Vulnerability

Ampache is a web-based audio/video application and file manager. A cross-site scripting vulnerability exists in Ampache. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit the vulnerability to execute client-side code...

5.4CVSS6.4AI score0.00839EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/08/22 12:00 a.m.11 views

WordPress raygun4wp plugin cross-site scripting vulnerability (CNVD-2019-31144)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on PHP and MySQL servers. raygun4wp is a website monitoring plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

6.1CVSS6.2AI score0.00905EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/08/22 12:00 a.m.16 views

WordPress option-tree plugin cross-site scripting vulnerability (CNVD-2019-31010)

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. option-tree is used in one of the theme selection building plugin. A cross-site scripting vulnerability exists in the WordPress...

6.1CVSS6.3AI score0.00913EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/08/22 12:00 a.m.11 views

WordPress moreads-se plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. moreads-se is a web advertising add-on plugin used in it. A cross-site scripting vulnerability exists in the WordPress moreads-se...

6.1CVSS6.3AI score0.00905EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/08/22 12:00 a.m.14 views

cPanel cross-site scripting vulnerability (CNVD-2019-28999)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the WHM Apache Configuration Include Editor in versions prior to cPanel 68.0.27. T...

6.1CVSS6.4AI score0.00647EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/08/22 12:00 a.m.12 views

WordPress import-users-from-csv-with-meta plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. import-users-from-csv-with-meta is a user data import plugin used in it. A cross-site scripting vulnerability exists in WordPress...

6.1CVSS6.2AI score0.00932EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/08/22 12:00 a.m.12 views

WordPress pagination plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. pagination is a custom pagination plugin used in it. A cross-site scripting vulnerability exists in the WordPress pagination plugi...

6.1CVSS6.2AI score0.01688EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/08/22 12:00 a.m.15 views

WordPress pdf-print plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports PHP and MySQL server set up a personal blog site. pdf-print is used in one of the PDF files used to generate, and support for the print function of the plug-in. There is a...

6.1CVSS6.2AI score0.01757EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/08/22 12:00 a.m.12 views

WordPress promobar plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. promobar is a plugin used in it to add page banners with timing features. A cross-site scripting vulnerability exists in the WordPress...

6.1CVSS6.2AI score0.01621EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/08/22 12:00 a.m.13 views

WordPress chained-quiz plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. chained-quiz is a chained quiz creation plugin used in it. A cross-site scripting vulnerability exists in the WordPress chained-quiz...

6.1CVSS6.3AI score0.00923EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/08/22 12:00 a.m.8 views

WordPress football-pool plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. football-pool is a plugin that analyzes statistics of soccer matches. A cross-site scripting vulnerability exists in the WordPress...

6.1CVSS6.2AI score0.00905EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/08/22 12:00 a.m.9 views

MantisBT Cross-Site Scripting Vulnerability

MantisBT is a Web-based open source defect tracking system of the MantisBT team . The system provides project management and defect tracking services in the form of Web operations. MantisBT suffers from a cross-site scripting vulnerability. The vulnerability stems from the lack of proper validati...

9.6CVSS6.4AI score0.02067EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/08/22 12:00 a.m.6 views

WordPress user-role plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. user-role is a plug-in for website user management. A cross-site scripting vulnerability exists in the WordPress user-role plugin...

6.1CVSS6.2AI score0.0139EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/08/22 12:00 a.m.21 views

WordPress realty plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. realty is used in one of the real estate website creation plugin. A cross-site scripting vulnerability exists in the...

6.1CVSS6.3AI score0.01441EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/08/22 12:00 a.m.14 views

WordPress bws-smtp plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. bws-smtp is a plugin used in it to configure an SMTP server to receive e-mail. A cross-site scripting vulnerability exists ...

6.1CVSS6.3AI score0.01621EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/08/22 12:00 a.m.14 views

WordPress awesome-support plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. awesome-support is a helpdesk and ticketing system plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

6.1CVSS6.3AI score0.00913EPSS
SaveExploits0References1
Prion
Prion
added 2019/08/21 8:15 p.m.16 views

Input validation

Newgen OmniFlow Intelligent Business Process Suite iBPS 7.0 has an "improper server side validation" vulnerability where client-side validations are tampered, and inappropriate information is stored on the server side and fetched from the server every time the user visits the D, creating business...

5CVSS7.3AI score0.01905EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder