Lucene search
K

248 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 5:2 p.m.1 views

CVE-2026-32517

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kleor Contact Manager contact-manager allows Reflected XSS.This issue affects Contact Manager: from n/a through = 9.1...

7.1CVSS5.8AI score0.00045EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/25 6:31 p.m.0 views

EUVD-2026-15878

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kleor Contact Manager contact-manager allows Reflected XSS.This issue affects Contact Manager: from n/a through = 9.1...

7.1CVSS5.8AI score0.00045EPSS
Exploits0References2
NVD
NVD
added 2026/03/25 5:17 p.m.0 views

CVE-2026-32517

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kleor Contact Manager contact-manager allows Reflected XSS.This issue affects Contact Manager: from n/a through = 9.1...

7.1CVSS0.00045EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/25 4:15 p.m.21 views

CVE-2026-32517 WordPress Contact Manager plugin <= 9.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kleor Contact Manager contact-manager allows Reflected XSS.This issue affects Contact Manager: from n/a through = 9.1...

7.1CVSS0.00045EPSS
Exploits0References1
CVE
CVE
added 2026/03/25 4:15 p.m.4 views

CVE-2026-32517

CVE-2026-32517 : A Reflected Cross-site Scripting (XSS) vulnerability exists in Kleor Contact Manager (contact-manager), caused by improper neutralization of input during web page generation. The issue affects Contact Manager versions up to 9.1. Successful exploitation could allow an attacker to ...

7.1CVSS5.8AI score0.00045EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/25 4:15 p.m.2 views

CVE-2026-32517

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kleor Contact Manager contact-manager allows Reflected XSS.This issue affects Contact Manager: from n/a through = 9.1...

5.8AI score0.00045EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/25 4:15 p.m.2 views

CVE-2026-32517 WordPress Contact Manager plugin <= 9.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kleor Contact Manager contact-manager allows Reflected XSS.This issue affects Contact Manager: from n/a through = 9.1...

7.1CVSS5.8AI score0.00045EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/25 12:0 a.m.1 views

PT-2026-28031

Name of the Vulnerable Software and Affected Versions Kleor Contact Manager versions through 9.1 Description A Reflected Cross-site Scripting XSS issue exists in Kleor Contact Manager. The issue is due to improper neutralization of input during web page generation. This allows an attacker to inje...

7.1CVSS5.8AI score0.00045EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.2 views

WordPress plugin Contact Manager 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

7.1CVSS5.7AI score0.00045EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/03/23 12:55 p.m.1 views

WordPress Contact Manager plugin <= 9.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by johska in WordPress Plugin Contact Manager versions = 9.1...

7.1CVSS5.8AI score0.00045EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.1 views

CVE-2025-68853

Deserialization of Untrusted Data vulnerability in Kleor Contact Manager contact-manager allows Object Injection.This issue affects Contact Manager: from n/a through = 9.1.1...

8.8CVSS5.5AI score0.0006EPSS
Exploits0References1
NVD
NVD
added 2026/02/20 4:22 p.m.1 views

CVE-2025-68853

Deserialization of Untrusted Data vulnerability in Kleor Contact Manager contact-manager allows Object Injection.This issue affects Contact Manager: from n/a through = 9.1.1...

8.8CVSS0.0006EPSS
Exploits0References1
CVE
CVE
added 2026/02/20 3:46 p.m.4 views

CVE-2025-68853

The CVE CVE-2025-68853 affects WordPress Contact Manager plugin (contact-manager) up to version 9.1.1 and is a Deserialization of Untrusted Data (PHP Object Injection) vulnerability. Public sources (NVD/Red Hat/Patchstack/Wordfence) identify the root cause as untrusted data deserialization in con...

8.8CVSS5.5AI score0.0006EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/20 3:46 p.m.1 views

CVE-2025-68853 WordPress Contact Manager plugin <= 9.1.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Kleor Contact Manager contact-manager allows Object Injection.This issue affects Contact Manager: from n/a through = 9.1.1...

5.4AI score0.0006EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/20 3:46 p.m.20 views

CVE-2025-68853 WordPress Contact Manager plugin <= 9.1.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Kleor Contact Manager contact-manager allows Object Injection.This issue affects Contact Manager: from n/a through = 9.1.1...

8.8CVSS0.0006EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/20 12:0 a.m.2 views

PT-2026-21112

Name of the Vulnerable Software and Affected Versions Kleor Contact Manager versions through 9.1.1 Description A flaw exists in Kleor Contact Manager that allows for object injection due to deserialization of untrusted data. This issue impacts the contact-manager component. Recommendations At the...

5.5AI score0.0006EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/02/20 12:0 a.m.3 views

WordPress plugin Contact Manager 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There we...

8.8CVSS5.9AI score0.0006EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/02/04 12:53 p.m.5 views

WordPress Contact Manager plugin <= 9.1.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Skalucy in WordPress Plugin Contact Manager versions = 9.1.1...

8.8CVSS5.6AI score0.0006EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/09 12:31 p.m.2 views

CVE-2023-4870

A vulnerability classified as problematic has been found in SourceCodester Contact Manager App 1.0. This affects an unknown part of the file index.php of the component Contact Information Handler. The manipulation of the argument contactID with the input " leads to cross site scripting. It is...

6.1CVSS6.2AI score0.00099EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:26 a.m.2 views

CVE-2023-4868

A vulnerability was found in SourceCodester Contact Manager App 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file add.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been...

8.8CVSS6.7AI score0.00099EPSS
Exploits1References1
Rows per page
Query Builder