Lucene search
+L

115 matches found

Prion
Prion
added 2023/10/02 9:15 a.m.22 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin = 1.2 versions...

4.3CVSS4.8AI score0.00366EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/02 8:49 a.m.43 views

CVE-2023-41859 WordPress Order Delivery Date for WP e-Commerce Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin = 1.2 versions...

5.9CVSS5.6AI score0.00366EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/02 8:49 a.m.91 views

CVE-2023-41859

CVE-2023-41859 is a stored XSS affecting the WordPress plugin Order Delivery Date for WP e-Commerce, versions

5.9CVSS5.1AI score0.00366EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/10/02 12:00 a.m.10 views

WordPress Plugin Order Delivery Date for WP e-Commerce Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

5.9CVSS6AI score0.00366EPSS
SaveExploits0References2
OSV
OSV
added 2023/09/25 1:15 a.m.7 views

CVE-2023-41874

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Tyche Softwares Order Delivery Date for WooCommerce plugin = 3.20.0 versions...

6.1CVSS5.8AI score0.00351EPSS
SaveExploits0References1
CVE
CVE
added 2023/09/25 12:42 a.m.57 views

CVE-2023-41874

CVE-2023-41874 affects Tyche Softwares Order Delivery Date for WooCommerce plugin versions ≤ 3.20.0. The vulnerability is an unauthenticated, reflected XSS caused by insufficient sanitization/escaping of user-controlled parameters, enabling script injection in pages viewed by admins and other use...

7.1CVSS6AI score0.00351EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/09/25 12:00 a.m.13 views

PT-2023-28134 · Tyche Softwares · Order Delivery Date For Woocommerce

Name of the Vulnerable Software and Affected Versions: Tyche Softwares Order Delivery Date for WooCommerce plugin versions = 3.20.0 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into a website,...

7.1CVSS5.8AI score0.00351EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/09/24 12:00 a.m.13 views

WordPress Plugin Tyche Softwares Order Delivery Date for WooCommerce Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Tyche Softwares Order...

7.1CVSS6AI score0.00351EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2023/09/05 12:00 a.m.21 views

WordPress Order Delivery Date for WP e-Commerce Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)

Software Order Delivery Date for WP e-Commerce Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-41859 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a6b7e3b09264 Credits Rio...

5.9CVSS6AI score0.00366EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/09/05 12:00 a.m.17 views

WordPress Order Delivery Date for WP e-Commerce Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Order Delivery Date for WP e-Commerce Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-41858 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 8f11a28e161e Credits R...

8.8CVSS7AI score0.00253EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/07/19 12:00 a.m.15 views

WordPress Woocommerce Delivery Date Premium Plugin <= 2.1.3 is vulnerable to Cross Site Scripting (XSS)

Software Woocommerce Delivery Date Premium Type Plugin Vulnerable versions = 2.1.3 Fixed in 2.2.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID c26f3fc67ca0 Credits Rafie Muhammad...

6.2AI score0.00272EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2023/07/18 12:00 a.m.9 views

WordPress Product Delivery Date Plugin < 1.1.5 is vulnerable to Cross Site Scripting (XSS)

Software Product Delivery Date Type Plugin Vulnerable versions 1.1.5 Fixed in 1.1.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 01a83af05e0b Credits Rafie Muhammad Patchstack...

6.8AI score0.00272EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2023/06/26 6:15 a.m.7 views

CVE-2023-28991

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in PI Websolution Order date, Order pickup, Order date time, Pickup Location, delivery date for WooCommerce plugin = 3.0.19 versions...

4.8CVSS7.3AI score0.00369EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/06/26 5:27 a.m.39 views

CVE-2023-28991 WordPress Order date time for WooCommerce Plugin <= 3.0.19 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in PI Websolution Order date, Order pickup, Order date time, Pickup Location, delivery date for WooCommerce plugin = 3.0.19 versions...

5.9CVSS5.6AI score0.00369EPSS
SaveExploits0References1
Cisco Threats
Cisco Threats
added 2017/09/20 5:57 p.m.19 views

Threat Outbreak Alert RuleID30686: Email Messages Distributing Malicious Software on September 20, 2017

Medium Alert ID: 55350 First Published: 2017 September 20 17:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30686 may contain the following files: Name ...

0.2AI score
SaveExploits0
Rows per page
Query Builder