Lucene search
K

228 matches found

Packet Storm News
Packet Storm News
added 2026/02/25 12:0 a.m.2 views

Implementation and Transition to Post-Quantum Cryptography of the Minimal IKE Protocol

This paper concerns the Minimal Internet Key Exchange IKE protocol, which has received little attention to date, despite its potential to make the best-known IKE protocol sufficiently lightweight to be also applied in contexts where it is currently prohibitive, due to its large footprint. First, ...

5.9AI score
Exploits0
Patchstack
Patchstack
added 2026/02/02 12:47 p.m.2 views

WordPress Colibri Page Builder plugin <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri_breadcrumb_element' Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'colibribreadcrumbelement' Shortcode vulnerability discovered by stealthcopter in WordPress Plugin Colibri Page Builder versions = 1.0.272...

6.4CVSS5.3AI score0.00229EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2026/02/02 12:44 p.m.3 views

WordPress Colibri Page Builder plugin <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_video_player Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via colibrivideoplayer Shortcode vulnerability discovered by Ngô Thiên An ancorn in WordPress Plugin Colibri Page Builder versions = 1.0.276...

6.4CVSS5.3AI score0.0031EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/09 9:29 a.m.2 views

CVE-2023-50833

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ExtendThemes Colibri Page Builder allows Stored XSS.This issue affects Colibri Page Builder: from n/a through 1.0.239...

6.5CVSS6.7AI score0.00155EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:14 a.m.4 views

CVE-2024-2839

The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'colibriposttitle' shortcode in all versions up to, and including, 1.0.263 due to insufficient input sanitization and output escaping on user supplied attributes such as 'headingtype'. This...

6.4CVSS5.8AI score0.00239EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/20 9:15 a.m.1 views

CVE-2025-11747

The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the colibriblogposts shortcode in all versions up to, and including, 1.0.345 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS4.9AI score0.00031EPSS
Exploits0References1
NVD
NVD
added 2025/12/19 9:15 a.m.1 views

CVE-2025-11747

The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the colibriblogposts shortcode in all versions up to, and including, 1.0.345 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00031EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/12/19 8:23 a.m.22 views

CVE-2025-11747 Colibri Page Builder <= 1.0.345 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the colibriblogposts shortcode in all versions up to, and including, 1.0.345 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00031EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/19 8:23 a.m.0 views

CVE-2025-11747 Colibri Page Builder <= 1.0.345 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the colibriblogposts shortcode in all versions up to, and including, 1.0.345 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS4.6AI score0.00031EPSS
Exploits0References3
EUVD
EUVD
added 2025/12/19 8:23 a.m.0 views

EUVD-2025-204478

The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the colibriblogposts shortcode in all versions up to, and including, 1.0.345 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS4.5AI score0.00031EPSS
Exploits0References4
CVE
CVE
added 2025/12/19 8:23 a.m.8 views

CVE-2025-11747

CVE-2025-11747 affects the Colibri Page Builder WordPress plugin. The Wordfence report documents a stored cross-site scripting vulnerability in the colibri_blog_posts shortcode caused by insufficient input sanitization and lack of proper output escaping, affecting all versions up to and including...

6.4CVSS4.6AI score0.00031EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/12/19 12:0 a.m.1 views

PT-2025-52435

The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the colibri blog posts shortcode in all versions up to, and including, 1.0.345 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS4.9AI score0.00031EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/12/19 12:0 a.m.1 views

WordPress plugin Colibri Page Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripti...

6.4CVSS5.6AI score0.00031EPSS
Exploits0References4
Patchstack
Patchstack
added 2025/12/18 10:17 p.m.1 views

WordPress Colibri Page Builder plugin <= 1.0.345 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by Abu Hurayra HurayraIIT in WordPress Plugin Colibri Page Builder versions = 1.0.345...

6.4CVSS5.3AI score0.00031EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/14 5:3 a.m.1 views

CVE-2025-11376

The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'colibriloop' shortcode in all versions up to, and including, 1.0.335 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS4.9AI score0.00032EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/13 6:30 p.m.2 views

EUVD-2025-203226

The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'colibriloop' shortcode in all versions up to, and including, 1.0.335 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS4.5AI score0.00032EPSS
Exploits0References3
NVD
NVD
added 2025/12/13 4:16 p.m.1 views

CVE-2025-11376

The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'colibriloop' shortcode in all versions up to, and including, 1.0.335 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00032EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/13 4:31 a.m.23 views

CVE-2025-11376 Colibri Page Builder <= 1.0.335 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'colibriloop' shortcode in all versions up to, and including, 1.0.335 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00032EPSS
Exploits0References2
CVE
CVE
added 2025/12/13 4:31 a.m.9 views

CVE-2025-11376

CVE-2025-11376 : Colibri Page Builder for WordPress is vulnerable to Stored Cross-Site Scripting via the colibri_loop shortcode in all versions up to 1.0.335. The issue arises from insufficient input sanitization and output escaping of user-supplied attributes. Exploitation requires authenticated...

6.4CVSS4.6AI score0.00032EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/13 4:31 a.m.1 views

CVE-2025-11376 Colibri Page Builder <= 1.0.335 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'colibriloop' shortcode in all versions up to, and including, 1.0.335 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS4.6AI score0.00032EPSS
Exploits0References2
Rows per page
Query Builder