Lucene search
+L

465 matches found

OpenVAS
OpenVAS
•added 2023/01/27 12:00 a.m.•22 views

Ubuntu: Security Advisory (USN-4779-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.06711EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/09/19 2:15 p.m.•6 views

CVE-2022-3036

The Gettext override translations WordPress plugin before 2.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite set...

4.8CVSS5.8AI score0.00688EPSS
SaveExploits2References2
OSV
OSV
•added 2022/09/19 2:15 p.m.•11 views

CVE-2022-3036

The Gettext override translations WordPress plugin before 2.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite set...

4.8CVSS5.8AI score0.00688EPSS
SaveExploits2References1
Prion
Prion
•added 2022/09/19 2:15 p.m.•28 views

Cross site scripting

The Gettext override translations WordPress plugin before 2.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite set...

4.3CVSS4.7AI score0.00688EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2022/09/19 2:01 p.m.•39 views

CVE-2022-3036 Gettext override translations < 2.0.0 - Admin+ Stored Cross-Site Scripting

The Gettext override translations WordPress plugin before 2.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite set...

5AI score0.00688EPSS
SaveExploits2References1
CVE
CVE
•added 2022/09/19 2:01 p.m.•86 views

CVE-2022-3036

CVE-2022-3036 affects the WordPress plugin Gettext override translations prior to version 2.0.0. The vulnerability arises from insufficient sanitisation/escaping of certain settings, enabling a high-privilege user (e.g., admin) to perform a Stored XSS attack, even when unfiltered_html is disallow...

4.8CVSS4.7AI score0.00688EPSS
SaveExploits2References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/09/19 12:00 a.m.•14 views

PT-2022-20073 · WordPress · Gettext Override Translations

Name of the Vulnerable Software and Affected Versions: Gettext override translations WordPress plugin versions prior to 2.0.0 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability...

4.8CVSS4.6AI score0.00688EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2022/09/19 12:00 a.m.•10 views

WordPress plugin Gettext override translations 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

4.8CVSS4.9AI score0.00688EPSS
SaveExploits2References2
Patchstack
Patchstack
•added 2022/08/29 12:00 a.m.•27 views

WordPress Gettext override translations plugin <= 1.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Su Xue Ming in WordPress Gettext override translations plugin versions = 1.0.1. Solution Update the WordPress Gettext override translations plugin to the latest available version at least 2.0.0...

4.8CVSS2.5AI score0.00688EPSS
SaveExploits2References1Affected Software1
wpexploit
wpexploit
•added 2022/08/29 12:00 a.m.•500 views

Gettext override translations < 2.0.0 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup Create/edit a translation and put the following...

4.8CVSS0.00688EPSS
SaveExploits2
WPVulnDB
WPVulnDB
•added 2022/08/29 12:00 a.m.•15 views

Gettext override translations < 2.0.0 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup PoC Create/edit a translation and put the followin...

4.8CVSS2.2AI score0.00688EPSS
SaveExploits2Affected Software1
OpenVAS
OpenVAS
•added 2022/08/26 12:00 a.m.•28 views

Ubuntu: Security Advisory (USN-5-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

2.1CVSS6.7AI score0.00396EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/08/26 12:00 a.m.•10 views

Ubuntu: Security Advisory (USN-3815-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.04257EPSS
SaveExploits1References2
Gentoo Linux
Gentoo Linux
•added 2022/08/21 12:00 a.m.•50 views

Gnome Shell, gettext, libcroco: Multiple Vulnerabilities

Background GNOME Shell provides core user interface functions for the GNOME desktop, like switching to windows and launching applications. gettext contains the GNU locale utilities. libcroco is a standalone CSS2 parsing and manipulation library. Description The crparserparseanycore function in...

7.1CVSS3.7AI score0.02319EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2022/08/21 12:00 a.m.•42 views

GLSA-202208-33 : Gnome Shell, gettext, libcroco: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202208-33 Gnome Shell, gettext, libcroco: Multiple Vulnerabilities - libcroco through 0.6.13 has excessive recursion in crparserparseanycore in cr-parser.c, leading to stack consumption. CVE-2020-12825 Note that Nessus has not...

7.1CVSS6.6AI score0.02319EPSS
SaveExploits1References5
OpenVAS
OpenVAS
•added 2022/07/31 12:00 a.m.•17 views

Fedora: Security Advisory for golang-github-gosexy-gettext (FEDORA-2022-ea8f4e232d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/07/31 12:00 a.m.•14 views

Fedora: Security Advisory for golang-github-chai2010-gettext (FEDORA-2022-5ef0bd9a27)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/07/31 12:00 a.m.•16 views

Fedora: Security Advisory for golang-github-leonelquinteros-gotext (FEDORA-2022-ea8f4e232d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
•added 2022/07/30 1:57 a.m.•23 views

[SECURITY] Fedora 36 Update: golang-github-leonelquinteros-gotext-1.5.0-3.fc36

Go Golang GNU gettext utilities package...

2.3AI score
SaveExploits0
Fedora
Fedora
•added 2022/07/30 1:57 a.m.•33 views

[SECURITY] Fedora 36 Update: golang-github-gosexy-gettext-0.9-8.fc36

Go bindings for GNU gettext, an internationalization and localization library for writing multilingual systems...

7.3AI score
SaveExploits0
Rows per page
Query Builder