Lucene search
+L

49 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 10:34 a.m.•13 views

CVE-2017-18523

The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book...

8.8CVSS7.7AI score0.00674EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 10:32 a.m.•16 views

CVE-2017-18522

The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book...

6.1CVSS6.3AI score0.00905EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:47 a.m.•11 views

CVE-2025-23602

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Europe Ecologie Les Verts EELV Newsletter eelv-newsletter allows Reflected XSS.This issue affects EELV Newsletter: from n/a through = 4.8.2...

7.1CVSS7.2AI score0.00411EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2013-1037

Malware in sbrugna...

6.1CVSS4.7AI score0.00546EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2024-52550

Malicious code in bioql PyPI...

5.4CVSS9AI score0.0023EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2025-3277

Malicious code in bioql PyPI...

7.1CVSS8.7AI score0.00411EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 8:10 a.m.•11 views

CVE-2024-54430

Cross-Site Request Forgery CSRF vulnerability in Europe Ecologie Les Verts EELV Newsletter eelv-newsletter allows Cross Site Request Forgery.This issue affects EELV Newsletter: from n/a through = 4.8.2...

5.4CVSS7.2AI score0.0023EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 12:28 a.m.•14 views

CVE-2013-10028

A vulnerability was found in EELV Newsletter Plugin 2.x on WordPress. It has been rated as problematic. Affected by this issue is the function stylenewsletter of the file lettreinfo.php. The manipulation of the argument email leads to cross site scripting. The attack may be launched remotely. The...

6.1CVSS6.3AI score0.00546EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/22 3:15 p.m.•15 views

CVE-2025-23602

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Europe Ecologie Les Verts EELV Newsletter eelv-newsletter allows Reflected XSS.This issue affects EELV Newsletter: from n/a through = 4.8.2...

7.1CVSS0.00411EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/22 2:29 p.m.•53 views

CVE-2025-23602

CVE-2025-23602 involves NotFound EELV Newsletter (NotFound EELV Newsletter: vulnerable versions up to 4.8.2) and is a Cross-site Scripting (XSS) flaw caused by improper input neutralization during web page generation. Red Hat’s security advisory clarifies that this is a NotFound EELV Newsletter X...

7.1CVSS7.2AI score0.00411EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/22 2:29 p.m.•9 views

CVE-2025-23602 WordPress EELV Newsletter plugin <= 4.8.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Europe Ecologie Les Verts EELV Newsletter eelv-newsletter allows Reflected XSS.This issue affects EELV Newsletter: from n/a through = 4.8.2...

7.1CVSS7.2AI score0.00411EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/22 2:29 p.m.•39 views

CVE-2025-23602 WordPress EELV Newsletter plugin <= 4.8.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Europe Ecologie Les Verts EELV Newsletter eelv-newsletter allows Reflected XSS.This issue affects EELV Newsletter: from n/a through = 4.8.2...

7.1CVSS0.00411EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/22 12:00 a.m.•1 views

CVE-2025-23602: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Europe Ecologie Les Verts EELV Newsletter eelv-newsletter allows Reflected XSS.This issue affects EELV Newsletter: from n/a through = 4.8.2...

7.1CVSS5.8AI score0.00411EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/22 12:00 a.m.•10 views

WordPress plugin EELV Newsletter 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

7.1CVSS7.4AI score0.00411EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/01/22 12:00 a.m.•15 views

PT-2025-4966 · Unknown · Eelv-Newsletter

Name of the Vulnerable Software and Affected Versions: EELV Newsletter versions prior to 4.8.2 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This enables an attacker to inject...

7.1CVSS9.3AI score0.00411EPSS
SaveExploits0References3
NVD
NVD
•added 2024/12/16 3:15 p.m.•14 views

CVE-2024-54430

Cross-Site Request Forgery CSRF vulnerability in Europe Ecologie Les Verts EELV Newsletter eelv-newsletter allows Cross Site Request Forgery.This issue affects EELV Newsletter: from n/a through = 4.8.2...

5.4CVSS0.0023EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/16 2:13 p.m.•47 views

CVE-2024-54430

CVE-2024-54430 is a CSRF vulnerability in the EELV Newsletter WordPress plugin (EELV Newsletter) affecting versions up to 4.8.2. Reported by RH and corroborated by ENISA/Wordfence data; CVSS v3.1 base score 5.4 (Medium). Status: patch not available in the connected sources; no exploit details pro...

5.4CVSS7.2AI score0.0023EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/16 2:13 p.m.•29 views

CVE-2024-54430 WordPress EELV Newsletter plugin <= 4.8.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Europe Ecologie Les Verts EELV Newsletter eelv-newsletter allows Cross Site Request Forgery.This issue affects EELV Newsletter: from n/a through = 4.8.2...

5.4CVSS0.0023EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/16 2:13 p.m.•9 views

CVE-2024-54430 WordPress EELV Newsletter plugin <= 4.8.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Bastien Ho EELV Newsletter allows Cross Site Request Forgery.This issue affects EELV Newsletter: from n/a through 4.8.2...

5.4CVSS7AI score0.0023EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/16 12:00 a.m.•2 views

CVE-2024-54430: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Europe Ecologie Les Verts EELV Newsletter eelv-newsletter allows Cross Site Request Forgery.This issue affects EELV Newsletter: from n/a through = 4.8.2...

5.4CVSS5.8AI score0.0023EPSS
SaveExploits0References1
Rows per page
Query Builder