Lucene search
K

15 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-30328

Malicious code in bioql PyPI...

6.5CVSS6.4AI score0.00197EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:16 a.m.5 views

CVE-2024-32526

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Flector Easy Textillate allows Stored XSS.This issue affects Easy Textillate: from n/a through 2.02...

6.5CVSS5.2AI score0.00197EPSS
Exploits0References1
WPVulnDB
WPVulnDB
added 2024/04/25 12:0 a.m.14 views

Easy Textillate <= 2.02 - Authenticated(Contributor+) Stored Cross-Site Scripting

Description The Easy Textillate plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.02 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...

6.5CVSS7.8AI score0.00197EPSS
Exploits0References1
NVD
NVD
added 2024/04/17 10:15 a.m.13 views

CVE-2024-32526

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Flector Easy Textillate allows Stored XSS.This issue affects Easy Textillate: from n/a through 2.02...

6.5CVSS6.4AI score0.00197EPSS
Exploits0References1
CVE
CVE
added 2024/04/17 9:48 a.m.56 views

CVE-2024-32526

CVE-2024-32526 : In Easy Textillate (WordPress plugin), stored XSS exists due to improper input neutralization during web page generation, affecting versions

6.5CVSS5.2AI score0.00197EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/04/17 9:48 a.m.14 views

CVE-2024-32526 WordPress Easy Textillate plugin <= 2.02 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Flector Easy Textillate allows Stored XSS.This issue affects Easy Textillate: from n/a through 2.02...

6.5CVSS6.6AI score0.00197EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/04/17 12:0 a.m.2 views

WordPress Plugin Easy Textillate 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6AI score0.00197EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/04/17 12:0 a.m.2 views

PT-2024-24645 · Unknown · Flector Easy Textillate

Name of the Vulnerable Software and Affected Versions: Flector Easy Textillate versions n/a through 2.02 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

6.5CVSS5.7AI score0.00197EPSS
Exploits0References3
Patchstack
Patchstack
added 2024/04/15 2:8 p.m.5 views

WordPress Easy Textillate plugin <= 2.02 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by NGÔ THIÊN AN Patchstack Alliance in WordPress Plugin Easy Textillate versions = 2.02...

6.5CVSS6.1AI score0.00197EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/04/15 12:0 a.m.8 views

WordPress Easy Textillate Plugin <= 2.02 is vulnerable to Cross Site Scripting (XSS)

Software Easy Textillate Type Plugin Vulnerable versions = 2.02 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32526 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 449b07d55d23 Credits Ngô Thiên An ancorn from VNPT-VCI Require...

6.5CVSS6.6AI score0.00197EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/26 5:32 a.m.11 views

CVE-2024-2303

The Easy Textillate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'textillate' shortcode in all versions up to, and including, 2.01 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.8AI score0.00127EPSS
Exploits0References2
CVE
CVE
added 2024/03/26 5:32 a.m.54 views

CVE-2024-2303

CVE-2024-2303 refers to a Stored XSS in the Easy Textillate WordPress plugin via the textillate shortcode. Affected: Easy Textillate for WordPress, all versions up to and including 2.01. Attack requires authentication at contributor level or higher to inject scripts into user‑visible pages, which...

6.4CVSS6AI score0.00127EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/03/26 12:0 a.m.1 views

WordPress Plugin Easy Textillate 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.4CVSS7.7AI score0.00127EPSS
Exploits0References3
Patchstack
Patchstack
added 2024/03/26 12:0 a.m.6 views

WordPress Easy Textillate Plugin <= 2.01 is vulnerable to Cross Site Scripting (XSS)

Software Easy Textillate Type Plugin Vulnerable versions = 2.01 Fixed in 2.02 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2303 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e2fef30ce1b2 Credits Tien Luong Required...

6.4CVSS5.8AI score0.00127EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/03/25 12:0 a.m.3 views

PT-2024-19638 · WordPress · Easy Textillate

Name of the Vulnerable Software and Affected Versions: Easy Textillate plugin for WordPress versions up to, and including, 2.01 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin's textillate shortcode. This allows...

6.4CVSS9.4AI score0.00127EPSS
Exploits0References5
Rows per page
Query Builder