Lucene search
+L

197 matches found

attackerkb
attackerkb
•added 2022/03/14 3:15 p.m.•12 views

CVE-2022-0503

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.2 does not sanitise and escape the s parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue in the network dashboard...

6.1CVSS6.3AI score0.008EPSS
SaveExploits2References2
OSV
OSV
•added 2022/03/14 3:15 p.m.•14 views

CVE-2022-0503

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.2 does not sanitise and escape the s parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue in the network dashboard...

6.1CVSS5.8AI score0.008EPSS
SaveExploits2References1
NVD
NVD
•added 2022/03/14 3:15 p.m.•31 views

CVE-2022-0503

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.2 does not sanitise and escape the s parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue in the network dashboard...

6.1CVSS0.008EPSS
SaveExploits2References1
CVE
CVE
•added 2022/03/14 2:41 p.m.•114 views

CVE-2022-0503

CVE-2022-0503 affects the WordPress Multisite Content Copier/Updater plugin for WordPress, prior to version 2.1.2. The vulnerability is a Reflected Cross-Site Scripting (XSS) in the network dashboard caused by insufficient sanitisation/escaping of the s parameter when echoed back in an attribute....

6.1CVSS6.1AI score0.008EPSS
SaveExploits2References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/14 12:00 a.m.•6 views

CVE-2022-0503: Improper Neutralization of Input During Web Page Generation

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.2 does not sanitise and escape the s parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue in the network dashboard...

6.1CVSS6.4AI score0.008EPSS
SaveExploits2References2
CNVD
CNVD
•added 2022/03/09 12:00 a.m.•69 views

WordPress Multisite Content Copier/Updater plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Multisite Content Copier/Updater plugin versi...

6.1CVSS1.7AI score0.008EPSS
SaveExploits2References1
CNVD
CNVD
•added 2022/03/09 12:00 a.m.•35 views

WordPress Multisite Content Copier/Updater plugin cross-site scripting vulnerability

WordPress is a set of blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress application plugin. A cross-site scripting vulnerability exists in versions of the WordPres...

6.1CVSS1.9AI score0.008EPSS
SaveExploits2References1
OSV
OSV
•added 2022/03/07 9:15 a.m.•15 views

CVE-2021-25039

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.0 does not sanitise and escape the wmcccontenttype, wmccsourceblog and wmccrecordperpage parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues...

6.1CVSS6.4AI score0.008EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2022/03/07 9:15 a.m.•7 views

CVE-2021-25039

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.0 does not sanitise and escape the wmcccontenttype, wmccsourceblog and wmccrecordperpage parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues...

6.1CVSS6.3AI score0.008EPSS
SaveExploits2References2
NVD
NVD
•added 2022/03/07 9:15 a.m.•36 views

CVE-2021-25039

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.0 does not sanitise and escape the wmcccontenttype, wmccsourceblog and wmccrecordperpage parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues...

6.1CVSS0.008EPSS
SaveExploits2References1
Prion
Prion
•added 2022/03/07 9:15 a.m.•29 views

Cross site scripting

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.0 does not sanitise and escape the wmcccontenttype, wmccsourceblog and wmccrecordperpage parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues...

4.3CVSS6.1AI score0.008EPSS
SaveExploits2References1Affected Software1
CVE
CVE
•added 2022/03/07 8:16 a.m.•85 views

CVE-2021-25039

The CVE-2021-25039 entry concerns the WordPress Multisite Content Copier/Updater plugin (before 2.1.0). The vulnerability arises from insufficient sanitization/escaping of the parameters wmcc_content_type, wmcc_source_blog, and wmcc_record_per_page, which are echoed back in attributes, enabling r...

6.1CVSS6.1AI score0.008EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2022/03/07 8:16 a.m.•33 views

CVE-2021-25039 Multisite Content Copier/Updater < 2.1.0 - Reflected Cross-Site Scripting

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.0 does not sanitise and escape the wmcccontenttype, wmccsourceblog and wmccrecordperpage parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues...

6.2AI score0.008EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2022/03/07 12:00 a.m.•18 views

WordPress plugin 跨站脚本漏洞

WordPress is a set of blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress application plugin. A cross-site scripting vulnerability exists in versions of the WordPres...

6.1CVSS5.3AI score0.008EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/07 12:00 a.m.•3 views

CVE-2021-25039: Improper Neutralization of Input During Web Page Generation

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.0 does not sanitise and escape the wmcccontenttype, wmccsourceblog and wmccrecordperpage parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues...

6.1CVSS6.4AI score0.008EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2022/03/07 12:00 a.m.•15 views

WordPress plugin跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Multisite Content Copier/Updater plugin versi...

6.1CVSS5.2AI score0.008EPSS
SaveExploits2References2
wpexploit
wpexploit
•added 2022/02/07 12:00 a.m.•105 views

Multisite Content Copier/Updater < 2.1.0 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape the wmcccontenttype, wmccsourceblog and wmccrecordperpage parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues alert/XSS-contenttype/' / alert/XSS-source/' / alert/XSS-record/' /...

6.1CVSS0.008EPSS
SaveExploits2
Patchstack
Patchstack
•added 2022/01/06 12:00 a.m.•11 views

WordPress Multisite Content Copier/Updater plugin <= 1.4.0 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered in WordPress Multisite Content Copier/Updater plugin versions = 1.4.0. Solution Update the WordPress Multisite Content Copier/Updater plugin to the latest available version at least 1.5.0...

2.2AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2022/01/06 12:00 a.m.•16 views

WordPress WordPress Multisite Content Copier/Updater plugin <= 1.4.0 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability discovered in WordPress WordPress Multisite Content Copier/Updater plugin versions = 1.4.0. Solution Update the WordPress WordPress Multisite Content Copier/Updater plugin to the latest available version at least 1.5.0...

2.6AI score
SaveExploits0References1Affected Software1
CNVD
CNVD
•added 2021/06/28 12:00 a.m.•14 views

Unauthorized Access Vulnerability in Xindu Ltd D430

Not satisfied with the history of being the earliest manufacturer of copiers and fax machines in Korea, Sindo Co., Ltd. strives to be the world's best solution partner. An unauthorized access vulnerability exists in the Xindo Ltd D430, which can be exploited by an attacker to gain unauthorized...

6.9AI score
SaveExploits0
Rows per page
Query Builder