Lucene search
K

6 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2005-4712

Malware in sbrugna...

7.5CVSS6.4AI score0.01042EPSS
Exploits1References8
RedhatCVE
RedhatCVE
added 2025/05/23 1:19 a.m.4 views

CVE-2022-3415

The Chat Bubble WordPress plugin before 2.3 does not sanitise and escape some contact parameters, which could allow unauthenticated attackers to set Stored Cross-Site Scripting payloads in them, which will trigger when an admin view the related contact message...

6.1CVSS5.9AI score0.01134EPSS
Exploits2References1
CNNVD
CNNVD
added 2023/02/04 12:0 a.m.2 views

WebFinance SQL注入漏洞

WebFinance is a web application for managing invoices and handling customer contacts. A SQL injection vulnerability exists in WebFinance version 0.5, which stems from a problem with an unknown function in the file htdocs/prospection/savecontact.php, where manipulation of the parameters...

9.8CVSS6.5AI score0.00349EPSS
Exploits0References4
Prion
Prion
added 2022/11/14 3:15 p.m.9 views

Cross site scripting

The Chat Bubble WordPress plugin before 2.3 does not sanitise and escape some contact parameters, which could allow unauthenticated attackers to set Stored Cross-Site Scripting payloads in them, which will trigger when an admin view the related contact message...

5.8CVSS5.9AI score0.01134EPSS
Exploits2References1Affected Software1
CNNVD
CNNVD
added 2022/11/14 12:0 a.m.1 views

WordPress plugin Chat Bubble 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.1CVSS6AI score0.01134EPSS
Exploits2References3
Positive Technologies
Positive Technologies
added 2022/11/14 12:0 a.m.2 views

PT-2022-22023 · WordPress · Chat Bubble

Name of the Vulnerable Software and Affected Versions: Chat Bubble WordPress plugin versions prior to 2.3 Description: The issue allows unauthenticated attackers to set Stored Cross-Site Scripting payloads in some contact parameters, which will trigger when an admin views the related contact...

6.1CVSS6.4AI score0.01134EPSS
Exploits2References4
Rows per page
Query Builder