Lucene search
+L

60 matches found

KittySploit
KittySploit
•added 2026/07/28 11:27 a.m.•4 views

Token Info Json File Detection

Detects Token Info Json File. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Token Info Json File.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Token Info Json File Detection', 'description': 'Detects Token...

5.8AI score
SaveExploits0References1
KittySploit
KittySploit
•added 2026/07/28 11:27 a.m.•7 views

Get Access Token Json Detection

Internal file is exposed in Constant Contact Forms wordpress plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Internal file is exposed in Constant Contact Forms wordpress plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

5.8AI score
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•28 views

EUVD-2021-11048

Malware in sbrugna...

4.8CVSS5.4AI score0.00654EPSS
SaveExploits2References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•26 views

EUVD-2023-38467

Malicious code in bioql PyPI...

4.3CVSS9.1AI score0.0047EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•30 views

EUVD-2023-56881

Malicious code in bioql PyPI...

7.5CVSS7.8AI score0.00443EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•34 views

EUVD-2024-19733

Malicious code in bioql PyPI...

6.5CVSS6.9AI score0.00317EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•27 views

EUVD-2023-49939

Malicious code in bioql PyPI...

8.8CVSS8.4AI score0.00252EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 6:06 a.m.•20 views

CVE-2023-34387

Missing Authorization vulnerability in Constant Contact Constant Contact Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Constant Contact Forms: from n/a through 2.0.3...

4.3CVSS8.5AI score0.0047EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 5:23 a.m.•28 views

CVE-2023-52208

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Constant Contact Constant Contact Forms.This issue affects Constant Contact Forms: from n/a through 2.4.2...

7.5CVSS7.8AI score0.00443EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:04 p.m.•25 views

CVE-2021-24134

Unvalidated input and lack of output encoding in the Constant Contact Forms WordPress plugin, versions before 1.8.8, lead to multiple Stored Cross-Site Scripting vulnerabilities, which allowed high-privileged user Editor+ to inject arbitrary JavaScript code or HTML in posts where the malicious fo...

4.8CVSS5.6AI score0.00654EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2024/12/13 3:15 p.m.•13 views

CVE-2023-34387

Missing Authorization vulnerability in Constant Contact Constant Contact Forms constant-contact-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Constant Contact Forms: from n/a through = 2.0.3...

4.3CVSS8.7AI score0.0047EPSS
SaveExploits0References3
NVD
NVD
•added 2024/12/13 3:15 p.m.•31 views

CVE-2023-34387

Missing Authorization vulnerability in Constant Contact Constant Contact Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Constant Contact Forms: from n/a through 2.0.3...

4.3CVSS0.0047EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/13 2:23 p.m.•38 views

CVE-2023-34387 WordPress Constant Contact Forms plugin <= 2.0.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Constant Contact Constant Contact Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Constant Contact Forms: from n/a through 2.0.3...

4.3CVSS0.0047EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/13 12:00 a.m.•24 views

WordPress plugin Constant Contact Forms has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

4.3CVSS8.3AI score0.0047EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•6 views

CVE-2023-34387: Missing Authorization

Missing Authorization vulnerability in Constant Contact Constant Contact Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Constant Contact Forms: from n/a through 2.0.3...

4.3CVSS8.7AI score0.0047EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/13 2:15 a.m.•52 views

CVE-2024-9614

The Constant Contact Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.1.2. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS0.00552EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2024/11/13 2:02 a.m.•51 views

CVE-2024-9614 Constant Contact Forms by MailMunch <= 2.1.2 - Reflected Cross-Site Scripting

The Constant Contact Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.1.2. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS0.00552EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2024/11/13 2:02 a.m.•21 views

CVE-2024-9614 Constant Contact Forms by MailMunch <= 2.1.2 - Reflected Cross-Site Scripting

The Constant Contact Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.1.2. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS8.4AI score0.00552EPSS
SaveExploits0References6
CVE
CVE
•added 2024/11/13 2:02 a.m.•100 views

CVE-2024-9614

CVE-2024-9614 affects the WordPress plugin Constant Contact Forms by MailMunch. It is a Reflected Cross-Site Scripting (XSS) vulnerability caused by improper escaping in add_query_arg across all versions up to 2.1.2. Unauthenticated attackers can induce user-visible script execution by tricking a...

6.1CVSS8.4AI score0.00552EPSS
SaveExploits0References6Affected Software1
CNNVD
CNNVD
•added 2024/11/13 12:00 a.m.•36 views

WordPress plugin Constant Contact Forms by MailMunch has a cross-site scripting vulnerability

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the WordPress plugin Constant Contact...

6.1CVSS8.1AI score0.00552EPSS
SaveExploits0References6
Rows per page
Query Builder