Lucene search
+L

151 matches found

CVE
CVE
added 2022/03/14 2:41 p.m.106 views

CVE-2022-0503

CVE-2022-0503 affects the WordPress Multisite Content Copier/Updater plugin for WordPress, prior to version 2.1.2. The vulnerability is a Reflected Cross-Site Scripting (XSS) in the network dashboard caused by insufficient sanitisation/escaping of the s parameter when echoed back in an attribute....

6.1CVSS6.1AI score0.008EPSS
SaveExploits2References1Affected Software1
CNVD
CNVD
added 2022/03/09 12:0 a.m.26 views

WordPress Multisite Content Copier/Updater plugin cross-site scripting vulnerability

WordPress is a set of blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress application plugin. A cross-site scripting vulnerability exists in versions of the WordPres...

6.1CVSS1.9AI score0.008EPSS
SaveExploits2References1
CNVD
CNVD
added 2022/03/09 12:0 a.m.28 views

WordPress Multisite Content Copier/Updater plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Multisite Content Copier/Updater plugin versi...

6.1CVSS1.7AI score0.008EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2022/03/07 9:15 a.m.3 views

CVE-2021-25039

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.0 does not sanitise and escape the wmcccontenttype, wmccsourceblog and wmccrecordperpage parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues...

6.1CVSS6.3AI score0.008EPSS
SaveExploits2References2
OSV
OSV
added 2022/03/07 9:15 a.m.10 views

CVE-2021-25039

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.0 does not sanitise and escape the wmcccontenttype, wmccsourceblog and wmccrecordperpage parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues...

6.1CVSS6.4AI score0.008EPSS
SaveExploits2References1
NVD
NVD
added 2022/03/07 9:15 a.m.28 views

CVE-2021-25039

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.0 does not sanitise and escape the wmcccontenttype, wmccsourceblog and wmccrecordperpage parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues...

6.1CVSS0.008EPSS
SaveExploits2References1
Prion
Prion
added 2022/03/07 9:15 a.m.23 views

Cross site scripting

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.0 does not sanitise and escape the wmcccontenttype, wmccsourceblog and wmccrecordperpage parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues...

4.3CVSS6.1AI score0.008EPSS
SaveExploits2References1Affected Software1
CVE
CVE
added 2022/03/07 8:16 a.m.79 views

CVE-2021-25039

The CVE-2021-25039 entry concerns the WordPress Multisite Content Copier/Updater plugin (before 2.1.0). The vulnerability arises from insufficient sanitization/escaping of the parameters wmcc_content_type, wmcc_source_blog, and wmcc_record_per_page, which are echoed back in attributes, enabling r...

6.1CVSS6.1AI score0.008EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2022/03/07 8:16 a.m.27 views

CVE-2021-25039 Multisite Content Copier/Updater < 2.1.0 - Reflected Cross-Site Scripting

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.0 does not sanitise and escape the wmcccontenttype, wmccsourceblog and wmccrecordperpage parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues...

6.2AI score0.008EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2022/03/07 12:0 a.m.9 views

WordPress plugin 跨站脚本漏洞

WordPress is a set of blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress application plugin. A cross-site scripting vulnerability exists in versions of the WordPres...

6.1CVSS5.3AI score0.008EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2022/03/07 12:0 a.m.7 views

WordPress plugin跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Multisite Content Copier/Updater plugin versi...

6.1CVSS5.2AI score0.008EPSS
SaveExploits2References2
wpexploit
wpexploit
added 2022/02/07 12:0 a.m.104 views

Multisite Content Copier/Updater < 2.1.0 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape the wmcccontenttype, wmccsourceblog and wmccrecordperpage parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues alert/XSS-contenttype/' / alert/XSS-source/' / alert/XSS-record/' /...

6.1CVSS0.008EPSS
SaveExploits2
Patchstack
Patchstack
added 2022/01/06 12:0 a.m.9 views

WordPress Multisite Content Copier/Updater plugin <= 1.4.0 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered in WordPress Multisite Content Copier/Updater plugin versions = 1.4.0. Solution Update the WordPress Multisite Content Copier/Updater plugin to the latest available version at least 1.5.0...

2.2AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2022/01/06 12:0 a.m.13 views

WordPress WordPress Multisite Content Copier/Updater plugin <= 1.4.0 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability discovered in WordPress WordPress Multisite Content Copier/Updater plugin versions = 1.4.0. Solution Update the WordPress WordPress Multisite Content Copier/Updater plugin to the latest available version at least 1.5.0...

2.6AI score
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2021/06/28 12:0 a.m.11 views

Unauthorized Access Vulnerability in Xindu Ltd D430

Not satisfied with the history of being the earliest manufacturer of copiers and fax machines in Korea, Sindo Co., Ltd. strives to be the world's best solution partner. An unauthorized access vulnerability exists in the Xindo Ltd D430, which can be exploited by an attacker to gain unauthorized...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2021/06/21 12:0 a.m.17 views

Unauthorized Access Vulnerability in Xerox D95 Copier-Printer of Fuji Xerox (China) Co.

Fuji Xerox China Co., Ltd. was established on January 3, 1995 as a wholly-owned holding company of Fuji Xerox in China with a registered capital of US$39 million. Fuji Xerox China Co., Ltd. is headquartered in Beijing. An unauthorized access vulnerability exists in the Xerox D95 Copier-Printer of...

6.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/12/09 12:0 a.m.97 views

SUSE SLES15 Security Update : buildah (SUSE-SU-2020:3423-1)

This update for buildah fixes the following issues : buildah was updated to v1.17.0 bsc1165184 : Handle cases where other tools mount/unmount containers overlay.MountReadOnly: support RO overlay mounts overlay: use fusermount for rootless umounts overlay: fix umount Switch default log level of...

9.3CVSS6.5AI score0.02668EPSS
SaveExploits1References8
Openbugbounty
Openbugbounty
added 2020/10/23 7:33 a.m.10 views

thaiwincopier.com Cross Site Scripting vulnerability OBB-1438136

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/06/21 3:22 p.m.11 views

bangkokcopier.com Cross Site Scripting vulnerability OBB-1203140

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Kitploit
Kitploit
added 2018/08/27 1:2 p.m.58 views

BillCipher - Information Gathering Tool For A Website Or IP Address

Information Gathering tool for a Website or IP address, use some ideas from Devploit. BillCipher can work in any operating system if they have and support Python 2, Python 3, and Ruby. Features DNS Lookup Whois Lookup GeoIP Lookup Subnet Lookup Port Scanner Page Links Zone Transfer HTTP Header Ho...

7AI score
SaveExploits0References2
Rows per page
Query Builder