Lucene search
+L

701 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:21 p.m.5 views

Malicious code in header-footer-wix-statics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1bb1db1683d102f55c2cd954c6c3c39e01f2c49eef99cd785841d3d3541c772d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:21 p.m.7 views

MAL-2022-3581 Malicious code in header-footer-wix-statics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1bb1db1683d102f55c2cd954c6c3c39e01f2c49eef99cd785841d3d3541c772d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
wpexploit
wpexploit
added 2022/06/01 12:0 a.m.148 views

Icegram < 2.1.8 - Contributor+ Stored Cross-Site Scripting

The plugin does not sanitize and escape some campaign parameters, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks Create/edit a campaign such as a Black Friday one, check the "Use Opt-in / Subscription / Lead capture form" settings and put...

5.4CVSS0.2AI score0.00571EPSS
SaveExploits2
OSV
OSV
added 2022/05/24 5:2 p.m.31 views

GHSA-PGPH-MC4P-F8C3 phpMyAdmin unsanitized Git information

phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/classes/Display/GitRevision.php and libraries/classes/Footer.php...

9.8CVSS9.3AI score0.02589EPSS
SaveExploits0References7
NVD
NVD
added 2022/04/28 4:15 p.m.22 views

CVE-2022-27860

Cross-Site Request Forgery CSRF leading to Cross-Site Scripting XSS in Shea Bunge's Footer Text plugin = 2.0.3 on WordPress...

6.1CVSS0.00373EPSS
SaveExploits0References2
OSV
OSV
added 2022/04/28 4:15 p.m.4 views

CVE-2022-27860

Cross-Site Request Forgery CSRF leading to Cross-Site Scripting XSS in Shea Bunge's Footer Text plugin = 2.0.3 on WordPress...

6.1CVSS5.8AI score0.00373EPSS
SaveExploits0References2
Prion
Prion
added 2022/04/28 4:15 p.m.19 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF leading to Cross-Site Scripting XSS in Shea Bunge's Footer Text plugin = 2.0.3 on WordPress...

4.3CVSS6.2AI score0.00373EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/04/28 3:32 p.m.29 views

CVE-2022-27860 WordPress Footer Text plugin <= 2.0.3 - Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF leading to Cross-Site Scripting XSS in Shea Bunge's Footer Text plugin = 2.0.3 on WordPress...

6.1CVSS6.4AI score0.00373EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/04/28 3:32 p.m.5 views

CVE-2022-27860 WordPress Footer Text plugin <= 2.0.3 - Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF leading to Cross-Site Scripting XSS in Shea Bunge's Footer Text plugin = 2.0.3 on WordPress...

6.1CVSS6.2AI score0.00373EPSS
SaveExploits0References2
CVE
CVE
added 2022/04/28 3:32 p.m.78 views

CVE-2022-27860

CVE-2022-27860 affects the WordPress plugin Footer Text (versions

6.1CVSS6.3AI score0.00373EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/04/28 9:52 a.m.5 views

CVE-2022-27860

Cross-Site Request Forgery CSRF leading to Cross-Site Scripting XSS in Shea Bunge's Footer Text plugin = 2.0.3 on WordPress...

6.1CVSS6.1AI score0.00373EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2022/04/28 12:0 a.m.26 views

WordPress Footer Text plugin <= 2.0.3 - Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF leading to Cross-Site Scripting XSS vulnerability discovered by Rasi Afeef in WordPress Footer Text plugin versions = 2.0.3. Solution No patched version is available. No response from the vendor...

6.1CVSS2.2AI score0.00373EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2022/04/28 12:0 a.m.5 views

WordPress plugin Footer Text 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Footer Text plugin version 2.0.3 and earlier versions...

6.1CVSS5.2AI score0.00373EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2022/03/08 12:0 a.m.18 views

WordPress Header Footer Code Manager Plugin < 1.1.17 XSS Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

6.1CVSS6.4AI score0.02416EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
added 2022/03/01 12:0 a.m.26 views

Header Footer Code Manager Plugin for WordPress < 1.1.17 Cross-Site Scripting

The WordPress Header Footer Code Manager Plugin installed on the remote host is affected by a reflected Cross-Site Scripting XSS vulnerability due to improper validation of user-supplied input. Note that the scanner has not tested for these issues but has instead relied only on the application's...

6.1CVSS6.3AI score0.02416EPSS
SaveExploits2References3
Patchstack
Patchstack
added 2022/02/28 12:0 a.m.14 views

WordPress Footer Plugin for Divi plugin <= 3.3.5 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Footer Plugin for Divi plugin versions = 3.3.5. Solution No patched version available...

4.4AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:0 a.m.11 views

WordPress Email Header Footer plugin <= 1.2.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Email Header Footer plugin versions = 1.2.1. Solution No patched version available...

1.9AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:0 a.m.12 views

WordPress Royal Elementor Addons (Header Footer Builder, Popups, Post Grid, Woocommerce Product Grid, Slider, Parallax Image, Free Elementor Widgets & Elementor Templates) plugin <= 1.3.32 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Royal Elementor Addons Header Footer Builder, Popups, Post Grid, Woocommerce Product Grid, Slider, Parallax Image, Free Elementor Widgets & Elementor Templates plugin versions = 1.3.32. Solution Update the WordPress Royal...

1.1AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:0 a.m.13 views

WordPress Email Header Footer plugin <= 1.2.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Email Header Footer plugin versions = 1.2.1. Solution No patched version available...

3.5AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/02/24 7:15 p.m.7 views

CVE-2022-0710

The Header Footer Code Manager plugin = 1.1.16 for WordPress is vulnerable to Reflected Cross-Site Scripting XSS via the $REQUEST'page' parameter...

6.1CVSS5.8AI score0.02416EPSS
SaveExploits2References1
Rows per page
Query Builder