Lucene search
+L

20187 matches found

NVD
NVD
•added 2024/07/18 1:15 a.m.•40 views

CVE-2024-39682

Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to HTML Injection in versions up to, and including, 1.7.15.4 due to insufficient input sanitization and output escaping. This vulnerability allows authenticated attackers with contributor-level access and above...

6.4CVSS0.00361EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/18 12:00 a.m.•7 views

CVE-2024-39682: Improper Encoding or Escaping of Output

Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to HTML Injection in versions up to, and including, 1.7.15.4 due to insufficient input sanitization and output escaping. This vulnerability allows authenticated attackers with contributor-level access and above...

6.4CVSS5.9AI score0.00361EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/07/17 11:47 p.m.•46 views

CVE-2024-39682 WordPress Cooked Plugin - Authenticated (Contributor+) HTML Injection via Recipe Excerpt

Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to HTML Injection in versions up to, and including, 1.7.15.4 due to insufficient input sanitization and output escaping. This vulnerability allows authenticated attackers with contributor-level access and above...

6.4CVSS0.00361EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2024/07/17 11:47 p.m.•20 views

CVE-2024-39682 WordPress Cooked Plugin - Authenticated (Contributor+) HTML Injection via Recipe Excerpt

Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to HTML Injection in versions up to, and including, 1.7.15.4 due to insufficient input sanitization and output escaping. This vulnerability allows authenticated attackers with contributor-level access and above...

6.4CVSS5.8AI score0.00361EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/07/17 11:47 p.m.•22 views

CVE-2024-39682 WordPress Cooked Plugin - Authenticated (Contributor+) HTML Injection via Recipe Excerpt

Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to HTML Injection in versions up to, and including, 1.7.15.4 due to insufficient input sanitization and output escaping. This vulnerability allows authenticated attackers with contributor-level access and above...

6.4CVSS5.8AI score0.00361EPSS
SaveExploits1References1
CVE
CVE
•added 2024/07/17 11:47 p.m.•90 views

CVE-2024-39682

CVE-2024-39682 affects the Cooked – Recipe Management WordPress plugin. It enables HTML Injection due to insufficient input sanitization and output escaping in versions up to and including 1.7.15.4. Exploitation requires authenticated access at contributor level or higher, and injected HTML would...

6.4CVSS5.8AI score0.00361EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/07/17 12:00 a.m.•7 views

PT-2024-28622

Name of the Vulnerable Software and Affected Versions Cooked plugin for WordPress versions up to, and including, 1.7.15.4 Description The Cooked plugin for WordPress is vulnerable to HTML Injection due to insufficient input sanitization and output escaping. This issue allows authenticated attacke...

6.4CVSS5.9AI score0.00361EPSS
SaveExploits1References6
Mend
Mend
•added 2024/07/16 9:43 p.m.•10 views

CVE-2024-6778

Race in DevTools in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. Chromium security severity: High...

8.8CVSS7.5AI score0.00788EPSS
SaveExploits3References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/16 12:00 a.m.•2 views

CVE-2024-6778: Concurrent Execution using Shared Resource with Improper Synchronization

Race in DevTools in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. Chromium security severity: High...

8.8CVSS7.5AI score0.00788EPSS
SaveExploits3References1
CNVD
CNVD
•added 2024/07/12 12:00 a.m.•60 views

NetBox Cross-Site Scripting Vulnerability (CNVD-2024-37588)

NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A cross-site scripting vulnerability exists in NetBox v4.0.3, which stems from the lack of effective filtering and escaping of user-supplied data in t...

7.1CVSS5.7AI score0.00398EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/07/12 12:00 a.m.•53 views

NetBox Cross-Site Scripting Vulnerability (CNVD-2024-37585)

NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A cross-site scripting vulnerability exists in NetBox v4.0.3, which stems from the lack of effective filtering and escaping of user-supplied data in t...

6.1CVSS5.7AI score0.004EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/07/12 12:00 a.m.•72 views

NetBox Cross-Site Scripting Vulnerability (CNVD-2024-37584)

NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A cross-site scripting vulnerability exists in NetBox v4.0.3, which stems from the lack of effective filtering and escaping of user-supplied data in t...

6.1CVSS5.8AI score0.004EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/07/12 12:00 a.m.•56 views

NetBox Cross-Site Scripting Vulnerability (CNVD-2024-37590)

NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A cross-site scripting vulnerability exists in NetBox v4.0.3, which stems from the lack of effective filtering and escaping of user-supplied data in t...

6.1CVSS5.7AI score0.00353EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/07/12 12:00 a.m.•59 views

NetBox Cross-Site Scripting Vulnerability (CNVD-2024-37582)

NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A cross-site scripting vulnerability exists in NetBox v4.0.3, which stems from the lack of effective filtering and escaping of user-supplied data in t...

7.1CVSS5.9AI score0.00353EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/07/12 12:00 a.m.•68 views

NetBox Cross-Site Scripting Vulnerability (CNVD-2024-37595)

NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A cross-site scripting vulnerability exists in NetBox v4.0.3, which stems from the lack of effective filtering and escaping of user-supplied data in t...

7.1CVSS5.8AI score0.004EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/07/12 12:00 a.m.•61 views

NetBox Cross-Site Scripting Vulnerability (CNVD-2024-37592)

NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A cross-site scripting vulnerability exists in NetBox v4.0.3, which stems from the lack of effective filtering and escaping of user-supplied data in t...

6.1CVSS5.7AI score0.00376EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/07/12 12:00 a.m.•57 views

NetBox Cross-Site Scripting Vulnerability (CNVD-2024-37587)

NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A cross-site scripting vulnerability exists in NetBox v4.0.3, which stems from the lack of effective filtering and escaping of user-supplied data in t...

7.1CVSS5.7AI score0.004EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/07/12 12:00 a.m.•65 views

NetBox Cross-Site Scripting Vulnerability (CNVD-2024-37578)

NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A cross-site scripting vulnerability exists in NetBox v4.0.3, which stems from the lack of effective filtering and escaping of user-supplied data in t...

7.1CVSS5.9AI score0.00398EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/07/12 12:00 a.m.•64 views

NetBox Cross-Site Scripting Vulnerability (CNVD-2024-37580)

NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A cross-site scripting vulnerability exists in NetBox v4.0.3, which stems from the lack of effective filtering and escaping of user-supplied data in t...

7.1CVSS5.7AI score0.00353EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/07/12 12:00 a.m.•70 views

NetBox Cross-Site Scripting Vulnerability (CNVD-2024-37591)

NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A cross-site scripting vulnerability exists in NetBox v4.0.3, which stems from the lack of effective filtering and escaping of user-supplied data in t...

6.1CVSS5.7AI score0.00353EPSS
SaveExploits1References1
Rows per page
Query Builder