Lucene search
K

335 matches found

RedhatCVE
RedhatCVE
added 2025/08/30 6:20 p.m.3 views

CVE-2025-58205

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows DOM-Based XSS.This issue affects ElementInvader Addons for Elementor: from n/a through = 1.3.6...

6.5CVSS5.9AI score0.00047EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/08/27 5:45 p.m.8 views

CVE-2025-58212 WordPress Epeken All Kurir Plugin <= 2.0.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in epeken Epeken All Kurir epeken-all-kurir allows DOM-Based XSS.This issue affects Epeken All Kurir: from n/a through = 2.0.1...

6.5CVSS0.00047EPSS
Exploits0References1
OSV
OSV
added 2025/08/20 5:15 p.m.1 views

CVE-2025-46856

Adobe Experience Manager versions 6.5.22 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability. A low privileged attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation ...

5.4CVSS5.8AI score0.00076EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/08/20 4:58 p.m.3 views

CVE-2025-46856 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.22 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability. A low privileged attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation ...

5.4CVSS5.8AI score0.00076EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/08/20 12:0 a.m.3 views

PT-2025-34133 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.22 and earlier Description: Adobe Experience Manager is susceptible to a DOM-based Cross-Site Scripting XSS issue. A low-privileged attacker could exploit this by manipulating the Document Object Model DO...

5.4CVSS5.5AI score0.00069EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/08/20 12:0 a.m.2 views

WordPress plugin iframe Wrapper 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS5.8AI score0.00095EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/08/14 6:21 p.m.7 views

CVE-2025-54708 WordPress B Blocks Plugin <= 2.0.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins B Blocks b-blocks allows DOM-Based XSS.This issue affects B Blocks: from n/a through = 2.0.5...

6.5CVSS0.00051EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/08/14 6:21 p.m.3 views

CVE-2025-54708 WordPress B Blocks Plugin <= 2.0.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins B Blocks b-blocks allows DOM-Based XSS.This issue affects B Blocks: from n/a through = 2.0.5...

6.5CVSS5.9AI score0.00051EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2025/07/22 11:31 a.m.3 views

CVE-2025-4284

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Rolantis Information Technologies Agentis allows Reflected XSS, DOM-Based XSS. This issue affects Agentis: before 4.32...

6.1CVSS5.4AI score0.00167EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/07/22 12:0 a.m.1 views

Rolantis Agentis 跨站脚本漏洞

Rolantis Agentis is a software for enterprise information management and automated processing from the Turkish company Rolantis. A cross-site scripting vulnerability exists in Rolantis Agentis versions prior to 4.32, which stems from improper input neutralization during web page generation and...

6.1CVSS5.6AI score0.00167EPSS
Exploits0References3
OSV
OSV
added 2025/07/16 4:15 p.m.0 views

CVE-2025-47053

Adobe Experience Manager versions 6.5.22 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability. A low privileged attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation ...

5.4CVSS5.8AI score0.00234EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/07/16 12:0 a.m.2 views

WordPress plugin Videopack 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.9AI score0.00143EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/06/27 12:0 a.m.1 views

WordPress plugin Leyka 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.9AI score0.00143EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/06/27 12:0 a.m.1 views

WordPress plugin Popup addon for Ninja Forms 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS5.9AI score0.00143EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 6:17 a.m.1 views

CVE-2024-50468

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in faceleg Raptor Editor wp-raptor allows DOM-Based XSS.This issue affects Raptor Editor: from n/a through = 1.0.20...

6.5CVSS5.9AI score0.00193EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/05/19 12:0 a.m.1 views

WordPress plugin WPAdverts 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6.1AI score0.00143EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/05/07 12:0 a.m.1 views

WordPress plugin Bold Page Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6.6AI score0.00143EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/24 12:0 a.m.1 views

WordPress plugin RAphicon 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

6.5CVSS6.5AI score0.00532EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/04/24 12:0 a.m.1 views

WordPress plugin Peadig’s Google +1 Button 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS6.6AI score0.00116EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/04/24 12:0 a.m.1 views

WordPress plugin Tooltip 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6.7AI score0.00204EPSS
Exploits0References2
Rows per page
Query Builder