Lucene search
+L

543 matches found

Positive Technologies
Positive Technologies
added 2023/08/14 12:0 a.m.7 views

PT-2023-24264 · WordPress · Custom Field For Wp Job Manager

Name of the Vulnerable Software and Affected Versions: The Custom Field For WP Job Manager WordPress plugin versions prior to 1.2 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is...

4.8CVSS5.3AI score0.00379EPSS
SaveExploits2References5
NVD
NVD
added 2023/08/07 1:15 p.m.28 views

CVE-2023-38392

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Hiroaki Miyashita Custom Field Template plugin = 2.5.9 versions...

7.1CVSS6.2AI score0.00354EPSS
SaveExploits0References1
OSV
OSV
added 2023/08/07 1:15 p.m.6 views

CVE-2023-38392

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Hiroaki Miyashita Custom Field Template plugin = 2.5.9 versions...

6.1CVSS7.3AI score0.00354EPSS
SaveExploits0References1
Prion
Prion
added 2023/08/07 1:15 p.m.24 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Hiroaki Miyashita Custom Field Template plugin = 2.5.9 versions...

5.8CVSS6AI score0.00354EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/08/07 12:45 p.m.30 views

CVE-2023-38392 WordPress Custom Field Template Plugin <= 2.5.9 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Hiroaki Miyashita Custom Field Template plugin = 2.5.9 versions...

7.1CVSS6.3AI score0.00354EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/08/07 12:45 p.m.18 views

CVE-2023-38392 WordPress Custom Field Template Plugin <= 2.5.9 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Hiroaki Miyashita Custom Field Template plugin = 2.5.9 versions...

7.1CVSS5.8AI score0.00354EPSS
SaveExploits0References1
CVE
CVE
added 2023/08/07 12:45 p.m.60 views

CVE-2023-38392

CVE-2023-38392 : Unauthenticated Reflected Cross-Site Scripting in WordPress plugin Custom Field Template by Hiroaki Miyashita, affected versions ≤ 2.5.9. Root cause: reflected XSS vulnerability. Impact: potential client-side script execution for unauthenticated attackers. Mitigation: update to v...

7.1CVSS6AI score0.00354EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/08/07 12:0 a.m.5 views

WordPress plugin Custom Field Template cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS6AI score0.00354EPSS
SaveExploits0References2
OSV
OSV
added 2023/07/27 2:15 p.m.8 views

CVE-2023-37980

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Gravity Master Custom Field For WP Job Manager plugin = 1.1 versions...

4.8CVSS7.3AI score0.00369EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/27 2:15 p.m.17 views

CVE-2023-37980

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Gravity Master Custom Field For WP Job Manager plugin = 1.1 versions...

5.9CVSS5.4AI score0.00369EPSS
SaveExploits0References1
Prion
Prion
added 2023/07/27 2:15 p.m.26 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Gravity Master Custom Field For WP Job Manager plugin = 1.1 versions...

4.3CVSS5.1AI score0.00369EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/07/27 1:59 p.m.57 views

CVE-2023-37980

CVE-2023-37980 affects the Gravity Master Custom Field For WP Job Manager plugin (WordPress) up to version 1.1. It is an authenticated stored XSS vulnerability exploitable by an administrator (admin+) to inject script via the Custom Field for WP Job Manager. Root cause details in the sources indi...

5.9CVSS5.2AI score0.00369EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/07/27 12:0 a.m.7 views

PT-2023-26228 · WordPress · Gravity Master Custom Field For Wp Job Manager

Name of the Vulnerable Software and Affected Versions: Gravity Master Custom Field For WP Job Manager plugin versions = 1.1 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin+ privileges can inject malicious...

5.9CVSS5.2AI score0.00369EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2023/07/24 12:0 a.m.15 views

WordPress Custom Field Template Plugin <= 2.5.9 is vulnerable to Cross Site Scripting (XSS)

Software Custom Field Template Type Plugin Vulnerable versions = 2.5.9 Fixed in 2.6.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-38392 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 03d055f030cb Credits Phd Require...

7.1CVSS5.6AI score0.00354EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2023/07/10 4:15 p.m.29 views

CVE-2023-22695

Cross-Site Request Forgery CSRF vulnerability in Hiroaki Miyashita Custom Field Template plugin = 2.5.8 versions...

8.8CVSS5.8AI score0.00321EPSS
SaveExploits0References1
OSV
OSV
added 2023/07/10 4:15 p.m.5 views

CVE-2023-22695

Cross-Site Request Forgery CSRF vulnerability in Hiroaki Miyashita Custom Field Template plugin = 2.5.8 versions...

8.8CVSS7.3AI score0.00321EPSS
SaveExploits0References1
Prion
Prion
added 2023/07/10 4:15 p.m.29 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Hiroaki Miyashita Custom Field Template plugin = 2.5.8 versions...

6.8CVSS8.7AI score0.00321EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/07/10 12:38 p.m.39 views

CVE-2023-22695 WordPress Custom Field Template Plugin <= 2.5.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Hiroaki Miyashita Custom Field Template plugin = 2.5.8 versions...

4.3CVSS9AI score0.00321EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/07/10 12:38 p.m.26 views

CVE-2023-22695 WordPress Custom Field Template Plugin <= 2.5.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Hiroaki Miyashita Custom Field Template plugin = 2.5.8 versions...

4.3CVSS7.1AI score0.00321EPSS
SaveExploits0References1
CVE
CVE
added 2023/07/10 12:38 p.m.55 views

CVE-2023-22695

CVE-2023-22695 is a CSRF vulnerability in the Hiroaki Miyashita Custom Field Template WordPress plugin, affecting versions

8.8CVSS6.5AI score0.00321EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder