Lucene search
+L

9333 matches found

CNNVD
CNNVD
•added 2025/01/29 12:00 a.m.•24 views

WordPress plugin Target Video Easy Publish 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

6.4CVSS8AI score0.00312EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/29 12:00 a.m.•4 views

CVE-2024-13561: Improper Neutralization of Input During Web Page Generation

The Target Video Easy Publish plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bridoverrideyt shortcode in all versions up to, and including, 3.8.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS6AI score0.00312EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/25 8:15 a.m.•17 views

CVE-2024-12076

The Target Video Easy Publish plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.3. This is due to missing or incorrect nonce validation on the resynccarousel, seeksnapshot, uploadedcc, and removecc functions. This makes it possible for...

6.1CVSS0.0033EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2025/01/25 7:24 a.m.•29 views

CVE-2024-12076 Target Video Easy Publish <= 3.8.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The Target Video Easy Publish plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.3. This is due to missing or incorrect nonce validation on the resynccarousel, seeksnapshot, uploadedcc, and removecc functions. This makes it possible for...

6.1CVSS0.0033EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/25 12:00 a.m.•3 views

CVE-2024-12076: Improper Neutralization of Input During Web Page Generation

The Target Video Easy Publish plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.3. This is due to missing or incorrect nonce validation on the resynccarousel, seeksnapshot, uploadedcc, and removecc functions. This makes it possible for...

6.1CVSS5.5AI score0.0033EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/25 12:00 a.m.•10 views

WordPress plugin Target Video Easy Publish 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

6.1CVSS7.8AI score0.0033EPSS
SaveExploits0References8
NVD
NVD
•added 2025/01/24 6:15 p.m.•39 views

CVE-2025-24721

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aleksandar Urošević Easy YouTube Gallery easy-youtube-gallery allows Stored XSS.This issue affects Easy YouTube Gallery: from n/a through = 1.0.4...

6.5CVSS0.00298EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/24 5:25 p.m.•78 views

CVE-2025-24721

CVE-2025-24721 concerns the WordPress plugin Easy YouTube Gallery . The connected sources confirm a Stored XSS vulnerability caused by improper input neutralization during web page generation, affecting versions up to 1.0.4. The vulnerability is authenticated (per the Wordfence listing) and there...

6.5CVSS7.2AI score0.00298EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/24 5:25 p.m.•39 views

CVE-2025-24721 WordPress Easy YouTube Gallery plugin <= 1.0.4 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aleksandar Urošević Easy YouTube Gallery easy-youtube-gallery allows Stored XSS.This issue affects Easy YouTube Gallery: from n/a through = 1.0.4...

6.5CVSS0.00298EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/24 11:47 a.m.•16 views

WordPress Easy YouTube Gallery plugin <= 1.0.4 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by muhammad yudha in WordPress Plugin Easy YouTube Gallery versions = 1.0.4...

6.5CVSS5.8AI score0.00298EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/01/24 12:00 a.m.•22 views

PT-2025-5535 · Unknown · Easy Youtube Gallery

Name of the Vulnerable Software and Affected Versions: Easy YouTube Gallery versions 1.0.0 through 1.0.4 Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. Specifically, it is a Stored XSS...

6.5CVSS5.2AI score0.00298EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/24 12:00 a.m.•7 views

CVE-2025-24721: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aleksandar Urošević Easy YouTube Gallery easy-youtube-gallery allows Stored XSS.This issue affects Easy YouTube Gallery: from n/a through = 1.0.4...

6.5CVSS5.8AI score0.00298EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/24 12:00 a.m.•25 views

WordPress plugin Easy YouTube Gallery 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS8AI score0.00298EPSS
SaveExploits0References2
NVD
NVD
•added 2025/01/22 3:15 p.m.•14 views

CVE-2025-23732

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in franciscopalacios Easy Filtering easy-filtering allows Reflected XSS.This issue affects Easy Filtering: from n/a through = 2.5.0...

7.1CVSS0.00359EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/22 2:29 p.m.•14 views

CVE-2025-23732 WordPress Easy Filtering plugin <= 2.5.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in franciscopalacios Easy Filtering easy-filtering allows Reflected XSS.This issue affects Easy Filtering: from n/a through = 2.5.0...

7.1CVSS7.2AI score0.00359EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/22 2:29 p.m.•64 views

CVE-2025-23732

CVE-2025-23732 is a NotFound Easy Filtering (WordPress) Reflected XSS vulnerability. Public records describe improper input neutralization during web page generation, enabling reflected cross-site scripting. Affected product: Easy Filtering (WordPress plugin) with vulnerable range stated as from ...

7.1CVSS7.2AI score0.00359EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/22 2:29 p.m.•49 views

CVE-2025-23732 WordPress Easy Filtering plugin <= 2.5.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in franciscopalacios Easy Filtering easy-filtering allows Reflected XSS.This issue affects Easy Filtering: from n/a through = 2.5.0...

7.1CVSS0.00359EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/01/22 4:03 a.m.•10 views

SUSE CVE-2024-13454

Weak encryption algorithm in Easy-RSA version 3.0.5 through 3.1.7 allows a local attacker to more easily bruteforce the private CA key when created using OpenSSL 3...

5.3CVSS6.7AI score0.00082EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/01/22 12:00 a.m.•3 views

PT-2025-5056

Name of the Vulnerable Software and Affected Versions Easy Filtering versions n/a through 2.5.0 Description The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables potential attackers to inje...

7.1CVSS0.00359EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/22 12:00 a.m.•4 views

CVE-2025-23732: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in franciscopalacios Easy Filtering easy-filtering allows Reflected XSS.This issue affects Easy Filtering: from n/a through = 2.5.0...

7.1CVSS5.8AI score0.00359EPSS
SaveExploits0References1
Rows per page
Query Builder