Lucene search
+L

226 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 12:42 p.m.•10 views

Malicious code in everything-everywhere-all-at-once-2022-online-free-fullmovies-on-at-home (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
•added 2024/04/18 10:15 a.m.•12 views

CVE-2024-32576

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Booking Algorithms BA Book Everything allows Stored XSS.This issue affects BA Book Everything: from n/a through 1.6.8...

5.4CVSS5.8AI score0.00289EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/18 9:34 a.m.•30 views

CVE-2024-32576 WordPress BA Book Everything plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Booking Algorithms BA Book Everything allows Stored XSS.This issue affects BA Book Everything: from n/a through 1.6.8...

6.5CVSS6.8AI score0.00289EPSS
SaveExploits0References1
OSV
OSV
•added 2024/04/18 9:15 a.m.•11 views

CVE-2024-32598

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Booking Algorithms BA Book Everything allows Stored XSS.This issue affects BA Book Everything: from n/a through 1.6.8...

5.4CVSS5.8AI score0.00325EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/18 8:26 a.m.•23 views

CVE-2024-32598 WordPress BA Book Everything plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Booking Algorithms BA Book Everything allows Stored XSS.This issue affects BA Book Everything: from n/a through 1.6.8...

5.9CVSS6.7AI score0.00325EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/18 8:26 a.m.•37 views

CVE-2024-32598 WordPress BA Book Everything plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Booking Algorithms BA Book Everything allows Stored XSS.This issue affects BA Book Everything: from n/a through 1.6.8...

5.9CVSS5.9AI score0.00325EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/18 12:00 a.m.•2 views

CVE-2024-32598: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Booking Algorithms BA Book Everything allows Stored XSS.This issue affects BA Book Everything: from n/a through 1.6.8...

5.9CVSS5.8AI score0.00325EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/04/18 12:00 a.m.•11 views

WordPress Plugin BA Book Everything 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6AI score0.00325EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/18 12:00 a.m.•1 views

CVE-2024-32576: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Booking Algorithms BA Book Everything allows Stored XSS.This issue affects BA Book Everything: from n/a through 1.6.8...

6.5CVSS5.8AI score0.00289EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/04/18 12:00 a.m.•14 views

WordPress Plugin BA Book Everything 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6.2AI score0.00289EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/04/16 3:42 p.m.•18 views

WordPress BA Book Everything plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by emad Patchstack Alliance in WordPress Plugin BA Book Everything versions = 1.6.8...

5.9CVSS6.1AI score0.00325EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/04/16 2:46 p.m.•18 views

WordPress BA Book Everything plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin BA Book Everything versions = 1.6.8...

6.5CVSS6.1AI score0.00289EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2024/04/16 1:15 p.m.•12 views

CVE-2024-3672

The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'all-items' shortcode in all versions up to, and including, 1.6.8 due to insufficient input sanitization and output escaping on user supplied attributes such as 'classes'. This makes it...

5.4CVSS5.9AI score0.0032EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/04/16 12:51 p.m.•17 views

CVE-2024-3672 BA Book Everything <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'all-items' shortcode in all versions up to, and including, 1.6.8 due to insufficient input sanitization and output escaping on user supplied attributes such as 'classes'. This makes it...

6.4CVSS6AI score0.0032EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/04/16 12:51 p.m.•39 views

CVE-2024-3672 BA Book Everything <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'all-items' shortcode in all versions up to, and including, 1.6.8 due to insufficient input sanitization and output escaping on user supplied attributes such as 'classes'. This makes it...

6.4CVSS5.8AI score0.0032EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/04/16 12:00 a.m.•24 views

WordPress BA Book Everything Plugin <= 1.6.8 is vulnerable to Cross Site Scripting (XSS)

Software BA Book Everything Type Plugin Vulnerable versions = 1.6.8 Fixed in 1.6.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32576 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID aedca1bff1c3 Credits LVT-tholv2k Required privilege...

6.5CVSS6.6AI score0.00289EPSS
SaveExploits0References2Affected Software1
WPVulnDB
WPVulnDB
•added 2024/04/16 12:00 a.m.•23 views

BA Book Everything < 1.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Description The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'all-items' shortcode in all versions up to, and including, 1.6.8 due to insufficient input sanitization and output escaping on user supplied attributes such as 'classes'. This...

6.4CVSS5.8AI score0.0032EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/04/16 12:00 a.m.•25 views

WordPress BA Book Everything Plugin <= 1.6.8 is vulnerable to Cross Site Scripting (XSS)

Software BA Book Everything Type Plugin Vulnerable versions = 1.6.8 Fixed in 1.6.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32598 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID d0acb032bf9c Credits emad Required privilege Administrat...

5.9CVSS6.6AI score0.00325EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/16 12:00 a.m.•2 views

CVE-2024-3672: Improper Neutralization of Input During Web Page Generation

The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'all-items' shortcode in all versions up to, and including, 1.6.8 due to insufficient input sanitization and output escaping on user supplied attributes such as 'classes'. This makes it...

6.4CVSS5.9AI score0.0032EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/04/16 12:00 a.m.•13 views

WordPress Plugin BA Book Everything 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.4CVSS6AI score0.0032EPSS
SaveExploits0References3
Rows per page
Query Builder