Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:6 a.m.2 views

CVE-2024-34420

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in talspotim Comments Evolved for WordPress allows Stored XSS.This issue affects Comments Evolved for WordPress: from n/a through 1.6.3...

5.9CVSS5.2AI score0.00137EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-34781

Malicious code in bioql PyPI...

5.9CVSS6.4AI score0.00137EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/05/14 12:0 a.m.1 views

WordPress plugin Comments Evolved for WordPress 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. Cross-site scripting vulnerability exists in WordPress...

5.9CVSS5.8AI score0.00137EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/05/09 11:29 a.m.11 views

CVE-2024-34420 WordPress Comments Evolved for WordPress plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in talspotim Comments Evolved for WordPress allows Stored XSS.This issue affects Comments Evolved for WordPress: from n/a through 1.6.3...

5.9CVSS6.3AI score0.00137EPSS
Exploits0References1
CVE
CVE
added 2024/05/09 11:29 a.m.17 views

CVE-2024-34420

CVE-2024-34420 is a stored XSS in the WordPress plugin Comments Evolved (gplus-comments) affecting versions n/a through 1.6.3. The Red Hat and CVE descriptions confirm improper input neutralization in web page generation leading to stored XSS. The Wordfence entry notes this vulnerability as authe...

5.9CVSS5.2AI score0.00137EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/09 11:29 a.m.7 views

CVE-2024-34420 WordPress Comments Evolved for WordPress plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in talspotim Comments Evolved for WordPress allows Stored XSS.This issue affects Comments Evolved for WordPress: from n/a through 1.6.3...

5.9CVSS6.8AI score0.00137EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/05/09 12:0 a.m.2 views

PT-2024-25873 · WordPress · Comments Evolved

Name of the Vulnerable Software and Affected Versions: Comments Evolved for WordPress versions 1.6.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendation...

5.9CVSS6.1AI score0.00137EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/05/06 9:49 p.m.2 views

WordPress Comments Evolved for WordPress plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Sharanabasappa Patchstack Alliance in WordPress Plugin Comments Evolved for WordPress versions = 1.6.3...

5.9CVSS6.1AI score0.00137EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/05/06 12:0 a.m.5 views

WordPress Comments Evolved for WordPress Plugin <= 1.6.3 is vulnerable to Cross Site Scripting (XSS)

Software Comments Evolved for WordPress Type Plugin Vulnerable versions = 1.6.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34420 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID ad6d473680e3 Credits Sharanabasappa Required...

5.9CVSS6.6AI score0.00137EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder