Lucene search
K

1285 matches found

Cvelist
Cvelist
added 2023/11/14 9:41 p.m.13 views

CVE-2023-47520 WordPress Responsive Column Widgets Plugin <= 1.2.7 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Michael Uno miunosoft Responsive Column Widgets plugin = 1.2.7 versions...

7.1CVSS6.3AI score0.00193EPSS
Exploits0References1
CVE
CVE
added 2023/11/14 9:41 p.m.33 views

CVE-2023-47520

CVE-2023-47520 : Unauth. Reflected Cross-Site Scripting (XSS) in the WordPress plugin Responsive Column Widgets (vendor: Michael Uno / miunosoft), affecting versions

7.1CVSS6.1AI score0.00193EPSS
Exploits0References1Affected Software1
Microsoft KB
Microsoft KB
added 2023/11/14 8:0 a.m.48 views

Description of the security update for SharePoint Server 2019: November 14, 2023 (KB5002526)

Description of the security update for SharePoint Server 2019: November 14, 2023 KB5002526 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures...

6.8CVSS7.1AI score0.00185EPSS
Exploits0
CNNVD
CNNVD
added 2023/11/14 12:0 a.m.2 views

WordPress Plugin responsive-column-widgets security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

7.1CVSS6.6AI score0.00193EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/11/14 12:0 a.m.3 views

PT-2023-30481 · WordPress · Responsive Column Widgets

Name of the Vulnerable Software and Affected Versions: Responsive Column Widgets plugin versions 1.2.7 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker could potentially inject malicious scripts into a websit...

7.1CVSS6.1AI score0.00193EPSS
Exploits0References3
Patchstack
Patchstack
added 2023/11/07 12:0 a.m.13 views

WordPress Responsive Column Widgets Plugin <= 1.2.7 is vulnerable to Cross Site Scripting (XSS)

Software Responsive Column Widgets Type Plugin Vulnerable versions = 1.2.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47520 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b88d78460aae Credits Le Ngoc A...

7.1CVSS5.6AI score0.00193EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/10/14 4:15 a.m.1 views

CVE-2023-30154

Multiple improper neutralization of SQL parameters in module AfterMail aftermailpresta for PrestaShop, before version 2.2.1, allows remote attackers to perform SQL injection attacks via idcustomer, idconf, idproduct and token parameters in aftermailajax.php via the 'idproduct' parameter in hooks...

9.8CVSS7.3AI score0.00293EPSS
Exploits0References2
Patchstack
Patchstack
added 2023/10/12 12:0 a.m.11 views

WordPress Responsive Column Widgets Plugin <= 1.2.7 is vulnerable to Open Redirection

Software Responsive Column Widgets Type Plugin Vulnerable versions = 1.2.7 Fixed in N/A OWASP Top 10 A5: Security Misconfiguration Classification Open Redirection CVE CVE-2023-45762 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 59d95f8609d5 Credits Phd Required privilege...

6.1CVSS6.5AI score0.00337EPSS
Exploits0References1Affected Software1
Snyk
Snyk
added 2023/10/03 9:47 p.m.4 views

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Column Management component. An attacker can inject malicious scripts that are executed when users interact with the web application by exploiting the lack of proper input sanitisation. Details Cross-sit...

6.1CVSS5.3AI score0.00055EPSS
Exploits0References2
NVD
NVD
added 2023/10/03 9:15 p.m.19 views

CVE-2023-43951

SSCMS 7.2.2 was discovered to contain a cross-site scripting XSS vulnerability via the Column Management component...

5.4CVSS5.4AI score0.00055EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/10/03 9:15 p.m.1 views

CVE-2023-43951

SSCMS 7.2.2 was discovered to contain a cross-site scripting XSS vulnerability via the Column Management component...

5.4CVSS5.8AI score0.00055EPSS
Exploits0References2
OSV
OSV
added 2023/10/03 9:15 p.m.4 views

CVE-2023-43951

SSCMS 7.2.2 was discovered to contain a cross-site scripting XSS vulnerability via the Column Management component...

5.4CVSS5.7AI score0.00055EPSS
Exploits0References1
Prion
Prion
added 2023/10/03 9:15 p.m.22 views

Cross site scripting

SSCMS 7.2.2 was discovered to contain a cross-site scripting XSS vulnerability via the Column Management component...

4.9CVSS5.4AI score0.00055EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/10/03 12:0 a.m.58 views

CVE-2023-43951

CVE-2023-43951 affects SSCMS version 7.2.2, with a cross-site scripting (XSS) vulnerability in the Column Management component. The Redhat/EUVD/CNNVD and third-party sources corroborate an XSS flaw in SSCMS 7.2.2 via Column Management. Exploitation details are not provided in the documents; no in...

5.4CVSS5.3AI score0.00055EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/03 12:0 a.m.14 views

CVE-2023-43951

SSCMS 7.2.2 was discovered to contain a cross-site scripting XSS vulnerability via the Column Management component...

5.6AI score0.00055EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/10/03 12:0 a.m.11 views

CVE-2023-43951

SSCMS 7.2.2 was discovered to contain a cross-site scripting XSS vulnerability via the Column Management component...

6.2AI score0.00055EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/10/03 12:0 a.m.3 views

SiteServerCMS Cross-Site Scripting Vulnerability

SSCMS SiteServerCMS SSCMS is an open source, cross-platform, enterprise-class content management system from China's SSCMS Inc. A cross-site scripting vulnerability exists in SiteServerCMS version 7.2.2, which stems from a cross-site scripting XSS vulnerability in the Column Management component...

5.4CVSS5.8AI score0.00055EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2023/09/28 5:15 a.m.1 views

CVE-2023-44275

OPNsense before 23.7.5 allows XSS via the index.php columncount parameter to the Lobby Dashboard...

5.4CVSS5.8AI score0.00214EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2023/09/28 12:0 a.m.4 views

PT-2023-29046 · Sscms · Sscms

Name of the Vulnerable Software and Affected Versions: SSCMS version 7.2.2 Description: A cross-site scripting XSS issue was found in the Column Management component. This type of issue allows attackers to inject malicious scripts into content from otherwise trusted websites. Recommendations: For...

5.4CVSS5.2AI score0.00055EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2023/09/27 3:19 p.m.6 views

CVE-2023-43232

A stored cross-site scripting XSS vulnerability in the Website column management function of DedeBIZ v6.2.11 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter...

5.4CVSS6.2AI score0.00764EPSS
Exploits0References4
Rows per page
Query Builder