Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 8:47 a.m.4 views

CVE-2025-23978

Cross-Site Request Forgery CSRF vulnerability in Ninos FlashCounter flashcounter allows Stored XSS.This issue affects FlashCounter: from n/a through = 1.1.8...

7.1CVSS7.2AI score0.0013EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-3579

Malicious code in bioql PyPI...

7.1CVSS9.1AI score0.0013EPSS
Exploits0References1
NVD
NVD
added 2025/01/31 9:15 a.m.2 views

CVE-2025-23978

Cross-Site Request Forgery CSRF vulnerability in Ninos FlashCounter flashcounter allows Stored XSS.This issue affects FlashCounter: from n/a through = 1.1.8...

7.1CVSS0.0013EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/31 8:23 a.m.19 views

CVE-2025-23978 WordPress FlashCounter plugin <= 1.1.8 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ninos FlashCounter flashcounter allows Stored XSS.This issue affects FlashCounter: from n/a through = 1.1.8...

7.1CVSS0.0013EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/31 8:23 a.m.10 views

CVE-2025-23978 WordPress FlashCounter plugin <= 1.1.8 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ninos FlashCounter flashcounter allows Stored XSS.This issue affects FlashCounter: from n/a through = 1.1.8...

7.1CVSS7.2AI score0.0013EPSS
Exploits0References1
CVE
CVE
added 2025/01/31 8:23 a.m.49 views

CVE-2025-23978

CVE-2025-23978 details (FlashCounter WordPress plugin): CSRF leads to Stored XSS in FlashCounter, affecting versions up to 1.1.8. Connected sources confirm the vendor/plugin vulnerability and affected range, with no public patch/version fix provided in the supplied documents. Monitor for updates ...

7.1CVSS7.2AI score0.0013EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/31 12:0 a.m.1 views

WordPress plugin FlashCounter 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

7.1CVSS8.7AI score0.0013EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/01/31 12:0 a.m.2 views

PT-2025-5242 · Unknown · Ninos Ego Flashcounter

Name of the Vulnerable Software and Affected Versions: Ninos Ego FlashCounter versions 1.1.8 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web applicatio...

7.1CVSS9.3AI score0.0013EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/01/27 1:22 p.m.2 views

WordPress FlashCounter plugin <= 1.1.8 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

CSRF to Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin FlashCounter versions = 1.1.8...

7.1CVSS5.9AI score0.0013EPSS
Exploits0Affected Software1
Rows per page
Query Builder