Lucene search
K

874 matches found

CNVD
CNVD
added 2019/08/21 12:0 a.m.1 views

WordPress cforms2 plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. cforms2 is a form builder plugin used in it. A cross-site scripting vulnerability exists in WordPress cforms2 plugin versions prio...

6.1CVSS6.2AI score0.00928EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/21 12:0 a.m.2 views

WordPress bws-google-analytics plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. bws-google-analytics is a plugin that uses data from the Google Analytics website analytics or website traffic tracking tool platform ...

6.1CVSS6.2AI score0.01384EPSS
Exploits1References1
CNVD
CNVD
added 2019/08/20 12:0 a.m.4 views

ZTE ZXHN F670 Cross-Site Scripting Vulnerability

The ZTE ZXHN F670 is a modem from China's ZTE Corporation ZTE. A cross-site scripting vulnerability exists in the ZTE ZXHN F670. An attacker can exploit this vulnerability to execute client-side code...

5.7CVSS6.4AI score0.00716EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/20 12:0 a.m.2 views

WordPress easy-digital-downloads plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. easy-digital-downloads is an e-commerce plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

6.1CVSS6.3AI score0.00971EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/20 12:0 a.m.1 views

WordPress xo-security plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. xo-security is a plugin used to enhance login-related security. A cross-site scripting vulnerability exists in the WordPress xo-securi...

6.1CVSS6.3AI score0.00915EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/16 12:0 a.m.6 views

Apache httpd Cross-Site Scripting Vulnerability

Apache httpd is the U.S. Apache Apache Software Foundation, an open source HTTP server developed and maintained specifically for modern operating systems. A cross-site scripting vulnerability exists in the modproxy error page in Apache httpd, which can be exploited by an attacker to execute...

6.1CVSS7.3AI score0.81466EPSS
Exploits4References1
CNVD
CNVD
added 2019/08/15 12:0 a.m.0 views

CloudBees Jenkins Wall Display Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . A cross-site scripting vulnerability exists in CloudBees Jenkins Wall Display Plugin, which can be exploited by an attacker to execute client-side code...

6.1CVSS6.4AI score0.00816EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/15 12:0 a.m.6 views

WordPress newstatpress plugin cross-site scripting vulnerability (CNVD-2019-30372)

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. newstatpress is a plugin used in it for real-time statistics on blog visits. A cross-site scripting vulnerability exists in the...

6.1CVSS6.3AI score0.01879EPSS
Exploits1References1
CNVD
CNVD
added 2019/08/15 12:0 a.m.3 views

CloudBees Jenkins Build Pipeline Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . A cross-site scripting vulnerability exists in the CloudBees Jenkins Build Pipeline Plugin, which can be exploited by an attacker to execute client-side code...

5.4CVSS6.4AI score0.00735EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/14 12:0 a.m.3 views

WordPress Ultimate Member plugin cross-site scripting vulnerability (CNVD-2019-27689)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Ultimate Member plugin is one of the plugins used to create member sites or online communities. A cross-site scripting vulnerability...

5.4CVSS6.3AI score0.00778EPSS
Exploits2References1
CNVD
CNVD
added 2019/08/14 12:0 a.m.3 views

WordPress wp-database-backup plugin cross-site scripting vulnerability (CNVD-2019-27696)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-database-backup plugin is a database backup and restore plugin used in it. A cross-site scripting vulnerability exists i...

6.1CVSS6.3AI score0.00924EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/14 12:0 a.m.1 views

WordPress woocommerce-pdf-invoices-packing-slips plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. woocommerce-pdf-invoices-packing-slips plugin is used in one of the invoices sent for e-commerce plugin. A cross-site...

6.1CVSS6.2AI score0.00922EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/14 12:0 a.m.2 views

WordPress Ultimate Member plugin cross-site scripting vulnerability (CNVD-2019-27693)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Ultimate Member plugin is one of the plugins used to create member sites or online communities. A cross-site scripting vulnerability...

6.1CVSS6.3AI score0.01046EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/14 12:0 a.m.4 views

WordPress wp-live-chat-support plugin cross-site scripting vulnerability (CNVD-2019-27640)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-live-chat-support plugin is a live chat plugin used in it. A cross-site scripting vulnerability exists in WordPress...

6.1CVSS6.2AI score0.0093EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/13 12:0 a.m.1 views

idreamsoft iCMS Cross-Site Scripting Vulnerability (CNVD-2020-17020)

idreamsoft iCMS is an open source content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in idreamsoft iCMS version 7.0.15, which stems from a lack of proper validation of client-side data in the WEB application and can be exploited by an attacker to...

6.1CVSS6.5AI score0.00826EPSS
Exploits1References1
CNVD
CNVD
added 2019/08/13 12:0 a.m.2 views

WordPress Appointment Booking Calendar plugin cross-site scripting vulnerability (CNVD-2019-27684)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Appointment Booking Calendar is a booking plugin used in it. A cross-site scripting vulnerability exists in the WordPress Appointment...

6.1CVSS6.3AI score0.01389EPSS
Exploits2References1
CNVD
CNVD
added 2019/08/13 12:0 a.m.2 views

WordPress 10Web Photo Gallery plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.10Web Photo Gallery plugin is an image management plugin used in it. A cross-site scripting vulnerability exists in the...

5.4CVSS6.2AI score0.01295EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/13 12:0 a.m.2 views

WordPress FV Flowplayer Video Player plugin cross-site scripting vulnerability (CNVD-2019-27687)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.FV Flowplayer Video Player is a video player plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

6.1CVSS6.3AI score0.02022EPSS
Exploits2References1
CNVD
CNVD
added 2019/08/13 12:0 a.m.2 views

Atlassian Jira Cross-Site Scripting Vulnerability (CNVD-2019-27253)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. A cross-site scripting vulnerability exists in the activity stream gadget in Atlassian Jira versions prior to 7.13.1. The...

5.4CVSS6.5AI score0.00756EPSS
Exploits1References1
CNVD
CNVD
added 2019/08/12 12:0 a.m.5 views

Backdrop CMS Cross-Site Scripting Vulnerability (CNVD-2019-26880)

Backdrop CMS is an open source content management system CMS. A cross-site scripting vulnerability exists in Backdrop CMS version 1.12.x before 1.12.8 and version 1.13.x before 1.13.3. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker...

6.1CVSS6.4AI score0.00846EPSS
Exploits0References1
Rows per page
Query Builder