Lucene search
+L

1453 matches found

WPVulnDB
WPVulnDB
•added 2024/01/18 12:00 a.m.•11 views

Shortcodes Finder < 1.5.5 - Reflected Cross-Site Scripting

Description The Shortcodes Finder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via an unknown parameter in versions up to, and including, 1.5.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.1CVSS6.2AI score0.00393EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/01/10 12:00 a.m.•22 views

WordPress Shortcodes Finder Plugin <= 1.5.5 is vulnerable to Cross Site Scripting (XSS)

Software Shortcodes Finder Type Plugin Vulnerable versions = 1.5.5 Fixed in 1.5.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-21750 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 0900912a134b Credits Le Ngoc Anh Required privilege...

7.1CVSS6.5AI score0.00393EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2023/11/13 11:15 p.m.•9 views

CVE-2023-47695

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Scribit Shortcodes Finder plugin = 1.5.3 versions...

6.1CVSS5.8AI score0.00437EPSS
SaveExploits0References1
NVD
NVD
•added 2023/11/13 11:15 p.m.•35 views

CVE-2023-47695

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Scribit Shortcodes Finder plugin = 1.5.3 versions...

7.1CVSS0.00437EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/13 11:15 p.m.•27 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Scribit Shortcodes Finder plugin = 1.5.3 versions...

5.8CVSS6.2AI score0.00437EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/11/13 10:59 p.m.•8 views

CVE-2023-47695 WordPress Shortcodes Finder Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Scribit Shortcodes Finder plugin = 1.5.3 versions...

7.1CVSS5.8AI score0.00437EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/13 10:59 p.m.•55 views

CVE-2023-47695

The CVE-2023-47695 entry concerns the WordPress plugin Scribit Shortcodes Finder (versions ≤ 1.5.3). The vulnerability is an unauthenticated, reflected Cross-Site Scripting (XSS) flaw caused by insufficient sanitization/escaping of parameters, allowing an attacker to inject scripts into pages vie...

7.1CVSS6AI score0.00437EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/13 12:00 a.m.•10 views

CVE-2023-47695: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Scribit Shortcodes Finder plugin = 1.5.3 versions...

7.1CVSS6.4AI score0.00437EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/11/13 12:00 a.m.•10 views

PT-2023-30571 · WordPress · Scribit Shortcodes Finder

Name of the Vulnerable Software and Affected Versions: Scribit Shortcodes Finder plugin versions = 1.5.3 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. Recommendations: For Scribit Shortcodes Finder plugin versions = 1.5.3, update to a version higher than...

7.1CVSS5.9AI score0.00437EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2023/11/13 12:00 a.m.•12 views

WordPress Plugin Shortcodes Finder Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

7.1CVSS6.3AI score0.00437EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2023/11/09 12:00 a.m.•14 views

WordPress Shortcodes Finder Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)

Software Shortcodes Finder Type Plugin Vulnerable versions = 1.5.3 Fixed in 1.5.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47695 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID cce9a201a0da Credits thiennv Require...

7.1CVSS5.7AI score0.00437EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2023/11/07 12:00 a.m.•24 views

Fedora 39 : python-cryptography / rust-asn1 / rust-asn1_derive (2023-31d5d51a2d)

The remote Fedora 39 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-31d5d51a2d advisory. - Update python-cryptography to 41.0.3, https://cryptography.io/en/latest/changelog/ - Security fix for CVE-2023-3832 SSH certificate encoding/parsi...

7.5CVSS6.5AI score0.00732EPSS
SaveExploits1References3
Openbugbounty
Openbugbounty
•added 2023/10/23 11:14 p.m.•11 views

thcfinder.com Cross Site Scripting vulnerability OBB-3764591

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Patchstack
Patchstack
•added 2023/10/16 12:00 a.m.•25 views

WordPress Broken Link Checker | Finder Plugin <= 2.4.2 is vulnerable to Broken Access Control

Software Broken Link Checker | Finder Type Plugin Vulnerable versions = 2.4.2 Fixed in 2.5.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-46082 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID cfffdd260ad0 Credits Abdi Prana...

6.6AI score0.00359EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2023/10/02 8:15 p.m.•18 views

CVE-2023-43835

Super Store Finder 3.7 and below is vulnerable to authenticated Arbitrary PHP Code Injection that could lead to Remote Code Execution when settings overwrite config.inc.php content...

8.8CVSS5.9AI score0.01703EPSS
SaveExploits1References1
NVD
NVD
•added 2023/10/02 8:15 p.m.•45 views

CVE-2023-43835

Super Store Finder 3.7 and below is vulnerable to authenticated Arbitrary PHP Code Injection that could lead to Remote Code Execution when settings overwrite config.inc.php content...

8.8CVSS9AI score0.01703EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/10/02 8:15 p.m.•15 views

CVE-2023-43835

Super Store Finder 3.7 and below is vulnerable to authenticated Arbitrary PHP Code Injection that could lead to Remote Code Execution when settings overwrite config.inc.php content...

8.8CVSS6AI score0.01703EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/10/02 12:00 a.m.•19 views

Super Store Finder Injection Vulnerability

Super Store Finder is an easy-to-use Google Maps API store finder program Super Store Finder by Super Store Finder. An injection vulnerability exists in Super Store Finder 3.7 and earlier versions, which stems from an arbitrary PHP code injection vulnerability. An attacker can exploit this...

8.8CVSS8.3AI score0.01703EPSS
SaveExploits1References2
CVE
CVE
•added 2023/10/02 12:00 a.m.•91 views

CVE-2023-43835

Summary: CVE-2023-43835 affects Super Store Finder 3.7 and earlier. The issue is an authenticated Arbitrary PHP Code Injection vulnerability that can lead to remote code execution when settings overwrite the content of config.inc.php. What’s affected: Super Store Finder software, versions ≤ 3.7. ...

8.8CVSS8.9AI score0.01703EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/02 12:00 a.m.•19 views

CVE-2023-43835

Super Store Finder 3.7 and below is vulnerable to authenticated Arbitrary PHP Code Injection that could lead to Remote Code Execution when settings overwrite config.inc.php content...

7.7AI score0.01703EPSS
SaveExploits1References1
Rows per page
Query Builder