Lucene search
K

874 matches found

CNNVD
CNNVD
added 2021/10/04 12:0 a.m.3 views

WordPress CM Tooltip Glossary插件跨站脚本漏洞

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL.A cross-site scripting vulnerability exists in the WordPress plugin CM Tooltip Glossary, which stems fro...

5.4CVSS5.4AI score0.00604EPSS
Exploits2References2
CNNVD
CNNVD
added 2021/10/04 12:0 a.m.3 views

Bosch Rexroth IndraMotion Mlc 跨站脚本漏洞

The Bosch Rexroth IndraMotion Mlc is a new device that combines motion and logic control, as well as robot control.A cross-site scripting vulnerability exists in the Bosch Rexroth IndraMotion Mlc, which stems from the lack of proper validation of client-side data by the WEB application. An attack...

10CVSS5.3AI score0.00609EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/10/04 12:0 a.m.5 views

Maccms 跨站脚本漏洞

Maccms is a PHP-based content management system CMS for film and television. A cross-site scripting vulnerability exists in Mccms10, which stems from the fact that the nickname in the editing function under the Member module of the product fails to properly validate user input data. An attacker c...

5.4CVSS5.5AI score0.00503EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/09/29 12:0 a.m.3 views

UCMS 跨站脚本漏洞

UCMS is a content management system written in PHP. A security vulnerability exists in UCMS, which originates from a stored cross-site scripting XSS vulnerability in ucms index.php. An attacker can exploit this vulnerability to execute client-side code...

5.4CVSS5.6AI score0.00487EPSS
Exploits1References1
CNVD
CNVD
added 2021/09/29 12:0 a.m.24 views

PortlandLabs Concrete CMS Cross-Site Scripting Vulnerability (CNVD-2021-76088)

PortlandLabs Concrete Cms is a team-oriented open source content management system for the United States PortlandLabs . A cross-site scripting vulnerability exists in PortlandLabs Concrete CMS that stems from the failure of the website field of the product's podcast comment feature to properly...

6.1CVSS6.3AI score0.0063EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/09/27 12:0 a.m.5 views

WordPress 插件 跨站脚本漏洞

WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the WordPress plugin TranslatePress, which stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute...

4.8CVSS5.1AI score0.05432EPSS
Exploits5References5
CNNVD
CNNVD
added 2021/09/16 12:0 a.m.3 views

Ec-cube 跨站脚本漏洞

Ec-cube is an open source e-commerce system from the Japanese company Ec-cube. EC-CUBE suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute client-side code...

6.1CVSS6.1AI score0.00748EPSS
Exploits0References4
CNVD
CNVD
added 2021/09/15 12:0 a.m.19 views

IBM Financial Transaction Manager Cross-Site Scripting Vulnerability (CNVD-2021-71255)

IBM Financial Transaction Manager is a financial transaction manager from IBM Corporation. A cross-site scripting vulnerability exists in IBM Financial Transaction Manager, which stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the...

5.4CVSS3.6AI score0.0048EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/09/13 12:0 a.m.3 views

WordPress 插件跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports personal blog sites on servers running PHP and MySQL. A security vulnerability exists in the WordPress plugin WP Courses LMS, which stems from the WP Courses LMS...

4.8CVSS5.5AI score0.00598EPSS
Exploits2References2
CNVD
CNVD
added 2021/09/11 12:0 a.m.9 views

WordPress plugin cross-site scripting vulnerability (CNVD-2021-100233)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . The WordPress Post Title Counter plugin suffers from a...

6.1CVSS6.2AI score0.00866EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/09/10 12:0 a.m.2 views

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists i...

6.1CVSS6.1AI score0.00908EPSS
Exploits1References4
CNNVD
CNNVD
added 2021/09/10 12:0 a.m.2 views

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . The WordPress Post Title Counter plugin suffers from a...

6.1CVSS5.4AI score0.00866EPSS
Exploits1References4
Huntr
Huntr
added 2021/09/09 1:17 p.m.9 views

Cross-site Scripting (XSS) - Reflected in universaloj/uoj-system

✍️ Description Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application. XSS occurs when a web application makes use of unvalidated or unencoded user input within the output it generates. The...

2.5AI score
Exploits0
Huntr
Huntr
added 2021/09/09 7:58 a.m.12 views

Cross-site Scripting (XSS) - Reflected in vfleaking/uoj

✍️ Description Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application. XSS occurs when a web application makes use of unvalidated or unencoded user input within the output it generates. The...

2.2AI score
Exploits0References1
Huntr
Huntr
added 2021/09/09 7:48 a.m.7 views

Cross-site Scripting (XSS) - Reflected in podcastgenerator/podcastgenerator

✍️ Description Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application. XSS occurs when a web application makes use of unvalidated or unencoded user input within the output it generates. The...

2.2AI score
Exploits0References1
Huntr
Huntr
added 2021/09/09 7:28 a.m.9 views

Cross-site Scripting (XSS) - Reflected in tildeclub/site

✍️ Description Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application. XSS occurs when a web application makes use of unvalidated or unencoded user input within the output it generates. The...

2.1AI score
Exploits0References1
Huntr
Huntr
added 2021/09/08 4:1 p.m.19 views

Cross-site Scripting (XSS) - Reflected in th3-822/rapidleech

✍️ Description Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application. XSS occurs when a web application makes use of unvalidated or unencoded user input within the output it generates. The...

2.4AI score
Exploits0References1
CNVD
CNVD
added 2021/09/08 12:0 a.m.16 views

WordPress cross-site scripting vulnerability

WordPress is the WordPress Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.A cross-site scripting vulnerability exists in Wordpress Plugin Highlight, which stems from the...

5.4CVSS1.1AI score0.00604EPSS
Exploits2References1
Huntr
Huntr
added 2021/09/07 10:11 a.m.17 views

Cross-site Scripting (XSS) - Reflected in andrewpaglusch/flashpaper

✍️ Description Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application. XSS occurs when a web application makes use of unvalidated or unencoded user input within the output it generates. The...

2.3AI score
Exploits0References1
Huntr
Huntr
added 2021/09/07 2:12 a.m.7 views

Cross-site Scripting (XSS) - Reflected in kasuganosoras/pigeon

✍️ Description Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application. XSS occurs when a web application makes use of unvalidated or unencoded user input within the output it generates. The...

2.2AI score
Exploits0References1
Rows per page
Query Builder