Lucene search
+L

8 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2024-34283

Malicious code in bioql PyPI...

6.4CVSS8.9AI score0.00346EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/23 7:50 a.m.•17 views

CVE-2024-11877

The Cricket Live Score plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cricketscore' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS5.8AI score0.00346EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/14 4:23 a.m.•39 views

CVE-2024-11877 Cricket Live Score <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Cricket Live Score plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cricketscore' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00346EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/12/14 4:23 a.m.•12 views

CVE-2024-11877 Cricket Live Score <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Cricket Live Score plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cricketscore' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS8.4AI score0.00346EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/12/14 12:00 a.m.•16 views

WordPress plugin Cricket Live Score has a cross-site scripting vulnerability.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...

6.4CVSS8AI score0.00346EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/14 12:00 a.m.•10 views

CVE-2024-11877: Improper Neutralization of Input During Web Page Generation

The Cricket Live Score plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cricketscore' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS8.6AI score0.00346EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/14 12:00 a.m.•17 views

PT-2024-17313 · WordPress · Cricket Live Score

Name of the Vulnerable Software and Affected Versions: Cricket Live Score plugin for WordPress versions prior to 2.0.2 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'cricket score' shortcode due to insufficient input sanitization and output escaping on...

6.4CVSS6.1AI score0.00346EPSS
SaveExploits0References8
Patchstack
Patchstack
•added 2024/12/13 8:21 p.m.•19 views

WordPress Cricket Live Score plugin <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by yudha in WordPress Plugin Cricket Live Score versions = 2.0.2...

6.4CVSS5.7AI score0.00346EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder