Lucene search
+L

149 matches found

CNVD
CNVD
•added 2025/06/17 12:00 a.m.•20 views

School Fees Payment System datatable.php File SQL Injection Vulnerability

School Fees Payment System is a tuition payment system. The School Fees Payment System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter sSortDir0 in the file /datatable.php. An attacker can exploit this...

9.8CVSS8.2AI score0.00514EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/06/10 12:00 a.m.•16 views

Code-Projects School Fees Payment System 注入漏洞

School Fees Payment System is a tuition payment system. The School Fees Payment System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter sSortDir0 in the file /datatable.php. An attacker can exploit this...

9.8CVSS7.9AI score0.00514EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
•added 2025/05/23 9:07 a.m.•10 views

CVE-2024-56287

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AppJetty WP jQuery DataTable wp-jquery-datatable allows Stored XSS.This issue affects WP jQuery DataTable: from n/a through = 4.0.1...

6.5CVSS7.2AI score0.00299EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 7:35 a.m.•11 views

CVE-2024-13566

The WP DataTable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 0.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

6.4CVSS5.8AI score0.00393EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/09 3:26 p.m.•15 views

CVE-2025-47605

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AppJetty WP jQuery DataTable wp-jquery-datatable allows Stored XSS.This issue affects WP jQuery DataTable: from n/a through = 4.1.0...

5.9CVSS7.2AI score0.00275EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/07 3:16 p.m.•13 views

CVE-2025-47605

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AppJetty WP jQuery DataTable wp-jquery-datatable allows Stored XSS.This issue affects WP jQuery DataTable: from n/a through = 4.1.0...

5.9CVSS0.00275EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/05/07 2:20 p.m.•31 views

CVE-2025-47605 WordPress WP jQuery DataTable plugin <= 4.1.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AppJetty WP jQuery DataTable wp-jquery-datatable allows Stored XSS.This issue affects WP jQuery DataTable: from n/a through = 4.1.0...

5.9CVSS0.00275EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/07 2:20 p.m.•8 views

CVE-2025-47605 WordPress WP jQuery DataTable plugin <= 4.1.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AppJetty WP jQuery DataTable wp-jquery-datatable allows Stored XSS.This issue affects WP jQuery DataTable: from n/a through = 4.1.0...

5.9CVSS7.2AI score0.00275EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/07 2:20 p.m.•65 views

CVE-2025-47605

CVE-2025-47605 describes a Stored XSS in the WordPress plugin WP jQuery DataTable (affected: WP jQuery DataTable

5.9CVSS7.2AI score0.00275EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/07 12:00 a.m.•2 views

CVE-2025-47605: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AppJetty WP jQuery DataTable wp-jquery-datatable allows Stored XSS.This issue affects WP jQuery DataTable: from n/a through = 4.1.0...

5.9CVSS5.8AI score0.00275EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/07 12:00 a.m.•11 views

WordPress plugin WP jQuery DataTable 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site...

5.9CVSS6.2AI score0.00275EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/07 12:00 a.m.•11 views

PT-2025-20177 · Appjetty · Appjetty Wp Jquery Datatable

Name of the Vulnerable Software and Affected Versions: AppJetty WP jQuery DataTable versions through 4.1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

5.9CVSS6.3AI score0.00275EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/04/23 3:39 p.m.•8 views

Malicious code in @sporta-technology/d11-web-components.datatable (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
Patchstack
Patchstack
•added 2025/01/31 10:26 p.m.•14 views

WordPress WP DataTable plugin <= 0.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via id Parameter vulnerability discovered by zaim in WordPress Plugin WP DataTable versions = 0.2.6...

6.4CVSS5.8AI score0.00393EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2025/01/31 9:15 a.m.•12 views

CVE-2024-13566

The WP DataTable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 0.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

6.4CVSS0.00393EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/01/31 8:21 a.m.•21 views

CVE-2024-13566 WP DataTable <= 0.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter

The WP DataTable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 0.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

6.4CVSS0.00393EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/01/31 8:21 a.m.•6 views

CVE-2024-13566 WP DataTable <= 0.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter

The WP DataTable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 0.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

6.4CVSS5.8AI score0.00393EPSS
SaveExploits0References4
CVE
CVE
•added 2025/01/31 8:21 a.m.•49 views

CVE-2024-13566

WP DataTable for WordPress is affected by a Stored Cross-Site Scripting (stored XSS) via the id parameter in all versions up to and including 0.2.6. Exploitation requires authenticated access at Contributor level or higher, enabling injection of scripts that execute when users load injected pages...

6.4CVSS5.8AI score0.00393EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/01/31 12:00 a.m.•11 views

WordPress plugin WP DataTable 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

6.4CVSS8.2AI score0.00393EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/31 12:00 a.m.•3 views

CVE-2024-13566: Improper Neutralization of Input During Web Page Generation

The WP DataTable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 0.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

6.4CVSS6AI score0.00393EPSS
SaveExploits0References1
Rows per page
Query Builder