Lucene search
+L

675 matches found

Vulnrichment
Vulnrichment
•added 2024/05/01 12:00 a.m.•15 views

CVE-2024-33306

SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting XSS via "First Name" parameter in Create User...

6AI score0.00657EPSS
SaveExploits1References1
CVE
CVE
•added 2024/04/24 5:00 a.m.•95 views

CVE-2024-1756

The WooCommerce Customers Manager WordPress plugin, versions prior to 29.8 , is vulnerable to an information disclosure flaw due to a lack of authorization and CSRF protections in an AJAX action. This vulnerability allows any authenticated user, such as a subscriber , to call the affected action ...

6.5CVSS9.2AI score0.00319EPSS
SaveExploits2References1Affected Software1
OSV
OSV
•added 2024/04/15 10:15 p.m.•15 views

CVE-2024-31651

A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the First Name parameter...

6.1CVSS5.9AI score0.00435EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/04/15 12:00 a.m.•38 views

CVE-2024-31651

A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the First Name parameter...

6AI score0.00435EPSS
SaveExploits1References1
CVE
CVE
•added 2024/04/15 12:00 a.m.•73 views

CVE-2024-31651

The Cosmetics and Beauty Product Online Store v1.0 is vulnerable to a cross-site scripting (XSS) flaw caused by the improper neutralization of input during web page generation. Attackers can inject a crafted payload into the First Name parameter to execute arbitrary web scripts or HTML. This vuln...

6.1CVSS6AI score0.00435EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2024/04/15 12:00 a.m.•15 views

Cosmetics and Beauty Product Online Store 安全漏洞

Cosmetics And Beauty Product Online Store is an online store for cosmetics and beauty products from the individual developer Carlo Montero. A security vulnerability exists in Cosmetics and Beauty Product Online Store v1.0, which originates from a cross-site scripting vulnerability in the First Na...

6.1CVSS6.1AI score0.00435EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/04/15 12:00 a.m.•13 views

PT-2024-24177 · Unknown · Cosmetics/Beauty Product Online Store

Name of the Vulnerable Software and Affected Versions: Cosmetics and Beauty Product Online Store version 1.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the First Name parameter. This enables attackers...

6.1CVSS5.9AI score0.00435EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2024/04/15 12:00 a.m.•16 views

CVE-2024-31651

A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the First Name parameter...

6.2AI score0.00435EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/15 12:00 a.m.•2 views

CVE-2024-31651: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the First Name parameter...

6.1CVSS6.1AI score0.00435EPSS
SaveExploits1References2
OSV
OSV
•added 2024/04/11 8:15 p.m.•15 views

CVE-2024-22717

Cross Site Scripting XSS vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the First Name field in the application...

6.1CVSS6AI score0.0037EPSS
SaveExploits1References1
NVD
NVD
•added 2024/04/11 8:15 p.m.•20 views

CVE-2024-22717

Cross Site Scripting XSS vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the First Name field in the application...

6.1CVSS5.9AI score0.0037EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/11 12:00 a.m.•2 views

CVE-2024-22717: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the First Name field in the application...

6.1CVSS6.2AI score0.0037EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/04/11 12:00 a.m.•11 views

Form Tools 安全漏洞

Form Tools is an open source codebase for Form Tools scripts, modules, themes and APIs. A security vulnerability exists in Form Tools version 3.1.1, which stems from a cross-site scripting XSS vulnerability in the First Name field...

6.1CVSS5.7AI score0.0037EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/04/11 12:00 a.m.•15 views

PT-2024-19536 · Unknown · Form Tools

Name of the Vulnerable Software and Affected Versions: Form Tools version 3.1.1 Description: A Cross Site Scripting XSS issue allows attackers to run arbitrary code via the First Name field in the application. This enables attackers to execute malicious scripts on the client-side, potentially...

6.1CVSS7.2AI score0.0037EPSS
SaveExploits1References4
OSV
OSV
•added 2024/03/28 7:15 p.m.•18 views

CVE-2024-31064

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field...

6.1CVSS6.1AI score0.00661EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2024/03/28 7:15 p.m.•9 views

CVE-2024-31064

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field...

6.1CVSS6.3AI score0.00661EPSS
SaveExploits1References5
NVD
NVD
•added 2024/03/28 7:15 p.m.•22 views

CVE-2024-31064

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field...

6.1CVSS7AI score0.00661EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/28 12:00 a.m.•3 views

CVE-2024-31064: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field...

6.1CVSS6.6AI score0.00661EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/03/28 12:00 a.m.•21 views

PT-2024-23744

Name of the Vulnerable Software and Affected Versions Insurance Mangement System versions 1.0.0 and earlier Description The issue allows a remote attacker to execute arbitrary code via the First Name input field. This is a Cross Site Scripting vulnerability. Recommendations For versions 1.0.0 and...

6.1CVSS6.4AI score0.00661EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2024/03/28 12:00 a.m.•15 views

Insurance Management System 安全漏洞

Insurance Management System is an insurance management system from the individual developer Angel Jude Reyes Suarez. A security vulnerability exists in Insurance Management System v.1.0.0 and prior versions, which stems from a cross-site scripting XSS vulnerability in the First Name field...

6.1CVSS5.7AI score0.00661EPSS
SaveExploits1References5
Rows per page
Query Builder