Lucene search
+L

149 matches found

Positive Technologies
Positive Technologies
•added 2023/06/07 12:00 a.m.•14 views

PT-2023-11367 · WordPress · Coming Soon/Maintenance Mode Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: WordPress Coming Soon Page & Maintenance Mode plugin versions up to, and including, 1.8.1 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows unauthenticated...

7.2CVSS6AI score0.00766EPSS
SaveExploits1References7
Mend
Mend
•added 2023/01/14 7:47 p.m.•1 views

CVE-2017-20167

A vulnerability, which was classified as problematic, was found in Minichan. This affects an unknown part of the file reports.php. The manipulation of the argument headline leads to cross site scripting. It is possible to initiate the attack remotely. The identifier of the patch is...

6.1CVSS0.00482EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/01/14 12:00 a.m.•16 views

PT-2023-10618 · Minichan · Minichan

Name of the Vulnerable Software and Affected Versions: Minichan affected versions not specified Description: A problematic issue was found in Minichan, affecting an unknown part of the file reports.php. The manipulation of the headline argument leads to cross-site scripting. It is possible to...

6.1CVSS6.6AI score0.00482EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/14 12:00 a.m.•4 views

CVE-2017-20167: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in Minichan. This affects an unknown part of the file reports.php. The manipulation of the argument headline leads to cross site scripting. It is possible to initiate the attack remotely. The identifier of the patch is...

6.1CVSS4AI score0.00482EPSS
SaveExploits0References3
OSV
OSV
•added 2021/10/19 3:15 p.m.•12 views

CVE-2021-36832

WordPress Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram versions = 2.0.2 vulnerable at "Headline" &messagedata16headline input...

5.4CVSS5.8AI score0.0057EPSS
SaveExploits0References2
NVD
NVD
•added 2021/10/19 3:15 p.m.•28 views

CVE-2021-36832

WordPress Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram versions = 2.0.2 vulnerable at "Headline" &messagedata16headline input...

5.4CVSS0.0057EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/10/19 2:13 p.m.•30 views

CVE-2021-36832 WordPress Icegram plugin <= 2.0.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

WordPress Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram versions = 2.0.2 vulnerable at "Headline" &messagedata16headline input...

4.8CVSS5.8AI score0.0057EPSS
SaveExploits0References2
Mend
Mend
•added 2021/10/19 2:13 p.m.•3 views

CVE-2021-36832

WordPress Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram versions = 2.0.2 vulnerable at "Headline" &messagedata16headline input...

5.4CVSS0.0057EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/10/19 12:00 a.m.•15 views

PT-2021-21377 · Unknown · Wordpress Popup

Name of the Vulnerable Software and Affected Versions: WordPress Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram versions = 2.0.2 Description: The issue concerns the headline input, specifically at the &message data16headline variable. This input is vulnerable, potentially allowi...

5.4CVSS5.4AI score0.0057EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/10/19 12:00 a.m.•16 views

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the...

5.4CVSS5.4AI score0.0057EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/19 12:00 a.m.•9 views

CVE-2021-36832: Improper Neutralization of Input During Web Page Generation

WordPress Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram versions = 2.0.2 vulnerable at "Headline" &messagedata16headline input...

5.4CVSS5.8AI score0.0057EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/08/17 8:22 a.m.•10 views

CVE-2021-36832

WordPress Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram versions = 2.0.2 vulnerable at "Headline" data16headline input...

5.4CVSS6.1AI score0.0057EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
•added 2021/08/17 12:00 a.m.•31 views

WordPress Icegram plugin <= 2.0.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Asif Nawaz Minhas in WordPress Icegram plugin versions = 2.0.2. Vulnerable at "Headline" &messagedata16headline input. Solution Update the WordPress Icegram plugin to the latest available version at least 2.0.3...

5.4CVSS1.7AI score0.0057EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2021/08/12 11:15 p.m.•25 views

CVE-2021-38602

PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...

4.8CVSS0.00755EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2021/08/12 11:15 p.m.•13 views

CVE-2021-38602

PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...

4.8CVSS6.1AI score0.00755EPSS
SaveExploits2References3
UbuntuCve
UbuntuCve
•added 2021/08/12 11:15 p.m.•29 views

CVE-2021-38602

PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...

4.8CVSS6AI score0.00755EPSS
SaveExploits2References3
OSV
OSV
•added 2021/08/12 11:15 p.m.•14 views

UBUNTU-CVE-2021-38602

PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...

4.8CVSS6AI score0.00755EPSS
SaveExploits2References4
Mend
Mend
•added 2021/08/12 10:03 p.m.•3 views

CVE-2021-38602

PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...

4.8CVSS0.00755EPSS
SaveExploits2References4
Cvelist
Cvelist
•added 2021/08/12 10:03 p.m.•39 views

CVE-2021-38602

PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...

5AI score0.00755EPSS
SaveExploits2References2
Debian CVE
Debian CVE
•added 2021/08/12 10:03 p.m.•37 views

CVE-2021-38602

Removed by vendor...

4.8CVSS5AI score0.00755EPSS
SaveExploits2
Rows per page
Query Builder