Lucene search
K

4382 matches found

CVE
CVE
added 2024/03/18 5:54 p.m.83 views

CVE-2024-26044

CVE-2024-26044 affects Adobe Experience Manager (AEM) 6.5.19 and earlier with a DOM-based XSS vulnerability in the web page handling that could cause malicious JavaScript to execute in a victim’s browser, potentially enabling arbitrary code execution in the browser context. The issue is documente...

5.4CVSS6.2AI score0.0054EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2024/03/18 5:54 p.m.102 views

CVE-2024-26042

CVE-2024-26042 affects Adobe Experience Manager (AEM) versions

5.4CVSS5.6AI score0.0054EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/18 5:54 p.m.17 views

CVE-2024-26042 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.19 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable web pages. Malicious JavaScript may be executed in a victim’s browser when they browse to the pag...

5.4CVSS5.9AI score0.0054EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/03/18 5:54 p.m.19 views

CVE-2024-26042 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.19 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable web pages. Malicious JavaScript may be executed in a victim’s browser when they browse to the pag...

5.4CVSS5.7AI score0.0054EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/03/18 5:54 p.m.16 views

CVE-2024-26032 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.19 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable web pages. Malicious JavaScript may be executed in a victim’s browser when they browse to the pag...

5.4CVSS5.9AI score0.0054EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/03/18 5:54 p.m.24 views

CVE-2024-26032 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.19 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable web pages. Malicious JavaScript may be executed in a victim’s browser when they browse to the pag...

5.4CVSS5.8AI score0.0054EPSS
Exploits0References1
CVE
CVE
added 2024/03/18 5:54 p.m.97 views

CVE-2024-26032

Adobe Experience Manager (AEM)

5.4CVSS6.2AI score0.0054EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2024/03/15 7:17 a.m.19 views

BIT-ARTIFACTORY-2024-2247

JFrog Artifactory versions below 7.77.7, 7.82.1, are vulnerable to DOM-based cross-site scripting due to improper handling of the import override mechanism...

8.8CVSS7AI score0.00502EPSS
Exploits0References2
OSV
OSV
added 2024/03/13 4:15 p.m.4 views

CVE-2024-1038

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to DOM-Based Reflected Cross-Site Scripting via a 'playground.wordpress.net' parameter in all versions up to, and including, 2.7.4.2 due to insufficient input sanitization and output escaping. This makes it possible fo...

6.1CVSS7.4AI score0.00592EPSS
Exploits0References3
Prion
Prion
added 2024/03/13 4:15 p.m.16 views

Cross site scripting

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to DOM-Based Reflected Cross-Site Scripting via a 'playground.wordpress.net' parameter in all versions up to, and including, 2.7.4.2 due to insufficient input sanitization and output escaping. This makes it possible fo...

5.8CVSS6.7AI score0.00592EPSS
Exploits0References3
CVE
CVE
added 2024/03/13 3:27 p.m.78 views

CVE-2024-1038

The CVE-2024-1038 entry concerns Beaver Builder – WordPress Page Builder for WordPress with a DOM-Based Reflected Cross-Site Scripting vulnerability. Affected versions are up to 2.7.4.2, due to insufficient input sanitization and output escaping in the playground.wordpress.net parameter, enabling...

6.1CVSS5.5AI score0.00592EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2024/03/13 3:27 p.m.24 views

CVE-2024-1038 Beaver Builder – WordPress Page Builder <= 2.7.4.2 - Reflected (DOM-Based) Cross-Site Scripting

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to DOM-Based Reflected Cross-Site Scripting via a 'playground.wordpress.net' parameter in all versions up to, and including, 2.7.4.2 due to insufficient input sanitization and output escaping. This makes it possible fo...

5.4CVSS5.5AI score0.00592EPSS
Exploits0References3
NVD
NVD
added 2024/03/13 2:15 p.m.14 views

CVE-2024-2247

JFrog Artifactory versions below 7.77.7, 7.82.1, are vulnerable to DOM-based cross-site scripting due to improper handling of the import override mechanism...

8.8CVSS8.4AI score0.00502EPSS
Exploits0References1
Prion
Prion
added 2024/03/13 2:15 p.m.18 views

Cross site scripting

JFrog Artifactory versions below 7.77.7, are vulnerable to DOM-based cross-site scripting due to improper handling of the import override mechanism...

6.8CVSS8.2AI score0.00502EPSS
Exploits0References1
CVE
CVE
added 2024/03/13 2:6 p.m.65 views

CVE-2024-2247

JFrog Artifactory is affected by a DOM-based cross-site scripting vulnerability in versions prior to 7.77.7 and 7.82.1, caused by improper handling of the import override mechanism. Impact: potential cross-site scripting via the vulnerable import override path. Affected software is Artifactory (A...

8.8CVSS8.4AI score0.00502EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/13 2:6 p.m.14 views

CVE-2024-2247 JFrog Artifactory Cross-Site Scripting

JFrog Artifactory versions below 7.77.7, 7.82.1, are vulnerable to DOM-based cross-site scripting due to improper handling of the import override mechanism...

8.8CVSS6.3AI score0.00502EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/03/13 2:6 p.m.17 views

CVE-2024-2247 JFrog Artifactory Cross-Site Scripting

JFrog Artifactory versions below 7.77.7, 7.82.1, are vulnerable to DOM-based cross-site scripting due to improper handling of the import override mechanism...

8.8CVSS8.5AI score0.00502EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2024/03/13 1:59 a.m.52 views

Exploit for Cross-site Scripting in Html-Js Doracms

CVE-2024-28715 CVE ID CVE-2024-28715 PRODUCT Do...

8.8CVSS7.7AI score0.01071EPSS
Exploits1
CNNVD
CNNVD
added 2024/03/13 12:0 a.m.5 views

WordPress Plugin Beaver Builder Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.1CVSS6.8AI score0.00592EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/03/13 12:0 a.m.3 views

JFrog Artifactory Cross-Site Scripting Vulnerability

JFrog Artifactory is an open source, general-purpose Artifact repository manager from Israel's JFrog that supports clustering and high-availability Docker registries, and provides an end-to-end automation solution for tracking artifacts from development to production. A cross-site scripting...

8.8CVSS6.1AI score0.00502EPSS
Exploits0References2
Rows per page
Query Builder