Lucene search
+L

192 matches found

RedhatCVE
RedhatCVE
•added 2026/03/26 5:01 p.m.•17 views

CVE-2026-22491

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Reflected XSS.This issue affects My auctions allegro: from n/a through = 3.6.35...

7.1CVSS5.8AI score0.00237EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/25 6:31 p.m.•21 views

EUVD-2026-15493

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Reflected XSS.This issue affects My auctions allegro: from n/a through = 3.6.35...

7.1CVSS5.8AI score0.00237EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/25 5:16 p.m.•10 views

CVE-2026-22491

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Reflected XSS.This issue affects My auctions allegro: from n/a through = 3.6.35...

7.1CVSS0.00237EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/25 12:00 a.m.•26 views

PT-2026-27815

Name of the Vulnerable Software and Affected Versions wphocus My auctions allegro versions through 3.6.35 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Reflected Cross-Site Scripting XSS condition. This allows an attacker...

7.1CVSS5.9AI score0.00237EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•1 views

CVE-2026-22491: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Reflected XSS.This issue affects My auctions allegro: from n/a through = 3.6.35...

7.1CVSS5.8AI score0.00237EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/23 9:16 p.m.•9 views

CVE-2025-67943

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Reflected XSS.This issue affects My auctions allegro: from n/a through = 3.6.32...

7.1CVSS5.4AI score0.00274EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/22 5:16 p.m.•11 views

CVE-2025-67943

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Reflected XSS.This issue affects My auctions allegro: from n/a through = 3.6.32...

7.1CVSS0.00274EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/22 4:51 p.m.•8 views

CVE-2025-67943

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Reflected XSS.This issue affects My auctions allegro: from n/a through = 3.6.32...

7.1CVSS5.3AI score0.00274EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/22 12:00 a.m.•29 views

PT-2026-4026

Name of the Vulnerable Software and Affected Versions wphocus My auctions allegro versions through 3.6.32 Description The software contains a flaw related to improper input handling during web page creation, which can lead to Reflected Cross-site Scripting XSS. This allows for the injection of...

5.3AI score0.00274EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/01/09 10:21 a.m.•14 views

CVE-2008-6567

Multiple cross-site scripting XSS vulnerabilities in Gallarific Free Edition allow remote attackers to inject arbitrary web script or HTML via 1 the e-mail address, 2 a comment, which is not properly handled during moderation, and 3 the tag parameter to gallery/tags.php...

4.3CVSS6AI score0.01107EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/12/25 1:23 p.m.•14 views

CVE-2025-68567

Cross-Site Request Forgery CSRF vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Cross Site Request Forgery.This issue affects My auctions allegro: from n/a through = 3.6.33...

5.4CVSS5.9AI score0.00127EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/25 1:23 p.m.•12 views

CVE-2025-68566

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Stored XSS.This issue affects My auctions allegro: from n/a through = 3.6.35...

5.9CVSS5.9AI score0.0021EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/24 3:30 p.m.•29 views

EUVD-2025-205269

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Stored XSS.This issue affects My auctions allegro: from n/a through = 3.6.32...

5.4CVSS5.5AI score0.0021EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/12/24 3:30 p.m.•14 views

EUVD-2025-205268

Cross-Site Request Forgery CSRF vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Cross Site Request Forgery.This issue affects My auctions allegro: from n/a through = 3.6.32...

8.8CVSS6.3AI score0.00127EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/24 1:16 p.m.•11 views

CVE-2025-68567

Cross-Site Request Forgery CSRF vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Cross Site Request Forgery.This issue affects My auctions allegro: from n/a through = 3.6.33...

5.4CVSS0.00127EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/24 1:16 p.m.•11 views

CVE-2025-68566

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Stored XSS.This issue affects My auctions allegro: from n/a through = 3.6.35...

5.9CVSS0.0021EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/24 1:10 p.m.•39 views

CVE-2025-68567 WordPress My auctions allegro plugin <= 3.6.33 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Cross Site Request Forgery.This issue affects My auctions allegro: from n/a through = 3.6.33...

5.4CVSS0.00127EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/24 12:00 a.m.•17 views

PT-2025-53255

Cross-Site Request Forgery CSRF vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Cross Site Request Forgery.This issue affects My auctions allegro: from n/a through = 3.6.32...

8.8CVSS6.9AI score0.00127EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•1 views

CVE-2025-68567: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Cross Site Request Forgery.This issue affects My auctions allegro: from n/a through = 3.6.33...

5.4CVSS5.8AI score0.00127EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/24 12:00 a.m.•12 views

PT-2025-53254

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Stored XSS.This issue affects My auctions allegro: from n/a through = 3.6.32...

5.4CVSS6AI score0.0021EPSS
SaveExploits0References2
Rows per page
Query Builder