Lucene search
+L

837 matches found

Vulnrichment
Vulnrichment
•added 2023/08/08 10:30 a.m.•17 views

CVE-2023-27421 WordPress Everest News Theme <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest themes Everest News theme = 1.1.0 versions...

7.1CVSS5.9AI score0.00406EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/08/08 10:30 a.m.•46 views

CVE-2023-27421 WordPress Everest News Theme <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest themes Everest News theme = 1.1.0 versions...

7.1CVSS6.3AI score0.00406EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/08/08 12:00 a.m.•17 views

PT-2023-21100 · Everest Themes · Mocho Blog Theme

Name of the Vulnerable Software and Affected Versions: Everest themes Mocho Blog theme versions 1.0.4 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially...

7.1CVSS6.2AI score0.00382EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/08/08 12:00 a.m.•17 views

WordPress plugin Everest News cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

7.1CVSS6AI score0.00406EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/08 12:00 a.m.•4 views

CVE-2023-27421: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest themes Everest News theme = 1.1.0 versions...

7.1CVSS6.3AI score0.00406EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/08 12:00 a.m.•4 views

CVE-2023-27412: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest themes Mocho Blog theme = 1.0.4 versions...

7.1CVSS7.1AI score0.00382EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/08/08 12:00 a.m.•18 views

PT-2023-21110 · Unknown · Everest News

Name of the Vulnerable Software and Affected Versions: Everest News theme versions prior to 1.1.0 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker could potentially inject malicious scripts into a website using the Evere...

7.1CVSS5.8AI score0.00406EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2023/07/18 12:00 a.m.•12 views

WordPress Emails Blacklist for Everest Forms Plugin < 1.0.4 is vulnerable to Cross Site Scripting (XSS)

Software Emails Blacklist for Everest Forms Type Plugin Vulnerable versions 1.0.4 Fixed in 1.0.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ca3c9ef88aae Credits Rafie Muhammad...

6.9AI score0.00272EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2023/06/16 11:15 a.m.•28 views

CVE-2023-27420

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Arya Multipurpose theme = 1.0.5 versions...

7.1CVSS6.3AI score0.00382EPSS
SaveExploits0References1
OSV
OSV
•added 2023/06/16 11:15 a.m.•12 views

CVE-2023-27420

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Arya Multipurpose theme = 1.0.5 versions...

6.1CVSS6.8AI score0.00382EPSS
SaveExploits0References1
Prion
Prion
•added 2023/06/16 11:15 a.m.•23 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Arya Multipurpose theme = 1.0.5 versions...

5.8CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/06/16 10:47 a.m.•74 views

CVE-2023-27420

CVE-2023-27420 corresponds to an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability in the Everest Themes Arya Multipurpose WordPress theme, affected versions are 1.0.5 and earlier. Public sources describe the issue as XSS but do not provide exploitation details in these documents...

7.1CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/16 12:00 a.m.•4 views

CVE-2023-27420: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Arya Multipurpose theme = 1.0.5 versions...

7.1CVSS7.1AI score0.00382EPSS
SaveExploits0References2
NVD
NVD
•added 2023/05/10 9:15 a.m.•17 views

CVE-2023-27419

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest themes Viable Blog theme = 1.1.4 versions...

7.1CVSS6.3AI score0.00382EPSS
SaveExploits0References1
OSV
OSV
•added 2023/05/10 9:15 a.m.•9 views

CVE-2023-27419

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest themes Viable Blog theme = 1.1.4 versions...

6.1CVSS6.8AI score0.00382EPSS
SaveExploits0References1
Prion
Prion
•added 2023/05/10 9:15 a.m.•21 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest themes Viable Blog theme = 1.1.4 versions...

5.8CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/05/10 8:29 a.m.•64 views

CVE-2023-27419

CVE-2023-27419 affects the WordPress Viable Blog theme ( 1.1.4 when available; monitor for a confirmed fixed release. If upgrading is not immediately possible, monitor vendor advisories for a confirmed patch. The vulnerability is unpatched/not publicly fixed in the supplied sources.

7.1CVSS6.1AI score0.00382EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/05/10 8:29 a.m.•12 views

CVE-2023-27419 WordPress Viable blog Theme <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest themes Viable Blog theme = 1.1.4 versions...

7.1CVSS6.3AI score0.00382EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/05/10 12:00 a.m.•10 views

PT-2023-21107 · Unknown · Everest Themes Viable Blog Theme

Name of the Vulnerable Software and Affected Versions: Everest themes Viable Blog theme versions = 1.1.4 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing...

7.1CVSS6.4AI score0.00382EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2023/04/25 12:00 a.m.•24 views

WordPress Everest News Theme <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)

Software Everest News Type Theme Vulnerable versions = 1.1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-27421 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c15b03e345f4 Credits László Radnai Required...

7.1CVSS5.9AI score0.00406EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder