Lucene search
+L

1225 matches found

CNNVD
CNNVD
added 2024/12/02 12:00 a.m.10 views

WordPress plugin Sticky Social Icons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS7.7AI score0.00286EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/02 12:00 a.m.45 views

PT-2024-35332 · Unknown · Sanil Shakya Sticky Social Icons

Name of the Vulnerable Software and Affected Versions: Sanil Shakya Sticky Social Icons versions 1.2.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows stored XSS. Recommendations: For...

5.9CVSS9.3AI score0.00286EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/11/26 5:30 a.m.7 views

Malicious code in kraken-wallet-network-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ac2acbbbff3feba97534f39d0555e145ac5994c2dcf5b5726f1002a09f5e6de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSV
OSV
added 2024/11/26 5:30 a.m.9 views

MAL-2024-10985 Malicious code in kraken-wallet-network-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ac2acbbbff3feba97534f39d0555e145ac5994c2dcf5b5726f1002a09f5e6de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
Patchstack
Patchstack
added 2024/11/20 9:31 a.m.10 views

WordPress Sticky Social Icons plugin <= 1.2.1 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by UKO Patchstack Alliance in WordPress Plugin Sticky Social Icons versions = 1.2.1...

5.9CVSS5.8AI score0.00286EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/11/20 12:00 a.m.15 views

WordPress Sticky Social Icons Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)

Software Sticky Social Icons Type Plugin Vulnerable versions = 1.2.1 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Cross Site Scripting XSS CVE CVE-2024-52491 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 9579d1011a2c Credits UKO Required privilege...

6.2AI score0.00286EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/11/19 5:15 p.m.14 views

CVE-2024-51880

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sistemasBebetter BeBetter Social Icons bebetter-social-icons allows DOM-Based XSS.This issue affects BeBetter Social Icons: from n/a through = 2.7...

6.5CVSS0.00325EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/19 4:31 p.m.7 views

CVE-2024-51880 WordPress BeBetter Social Icons plugin <= 2.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BeBetter Hotels BeBetter Social Icons allows DOM-Based XSS.This issue affects BeBetter Social Icons: from n/a through 2.7...

6.5CVSS6.9AI score0.00325EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/19 4:31 p.m.26 views

CVE-2024-51880 WordPress BeBetter Social Icons plugin <= 2.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sistemasBebetter BeBetter Social Icons bebetter-social-icons allows DOM-Based XSS.This issue affects BeBetter Social Icons: from n/a through = 2.7...

6.5CVSS0.00325EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/19 12:00 a.m.8 views

WordPress plugin BeBetter Social Icons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.7AI score0.00325EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/19 12:00 a.m.9 views

PT-2024-35011 · Unknown · Bebetter Social Icons

Name of the Vulnerable Software and Affected Versions: BeBetter Social Icons versions through 2.7 Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This can lead to the execution of malicious scripts in the context of...

6.5CVSS7AI score0.00325EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/11/08 3:01 p.m.8 views

WordPress BeBetter Social Icons plugin <= 2.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin BeBetter Social Icons versions = 2.7...

6.5CVSS6.1AI score0.00325EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2024/11/08 12:25 p.m.5 views

MAL-2024-10569 Malicious code in quill-icons-park (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fd81ef15b75fdcc727a1f8cf17b089f8a90917d26c5db98ea76231da4ffb701 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7.2AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/11/08 12:25 p.m.5 views

Malicious code in quill-icons-park (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fd81ef15b75fdcc727a1f8cf17b089f8a90917d26c5db98ea76231da4ffb701 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Patchstack
Patchstack
added 2024/11/08 12:00 a.m.11 views

WordPress BeBetter Social Icons Plugin <= 2.7 is vulnerable to Cross Site Scripting (XSS)

Software BeBetter Social Icons Type Plugin Vulnerable versions = 2.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51880 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 646bb344be94 Credits SOPROBRO Required privilege...

6.5CVSS6.5AI score0.00325EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/10/23 4:15 p.m.42 views

CVE-2024-49676

Unrestricted Upload of File with Dangerous Type vulnerability in Michael Bourne Custom Icons for Elementor custom-icons-for-elementor allows Upload a Web Shell to a Web Server.This issue affects Custom Icons for Elementor: from n/a through = 0.3.3...

6.6CVSS0.00324EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/23 3:31 p.m.16 views

CVE-2024-49676 WordPress Custom Icons for Elementor plugin <= 0.3.3 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Michael Bourne Custom Icons for Elementor custom-icons-for-elementor allows Upload a Web Shell to a Web Server.This issue affects Custom Icons for Elementor: from n/a through = 0.3.3...

6.6CVSS5.9AI score0.00324EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/23 3:31 p.m.62 views

CVE-2024-49676

CVE-2024-49676 affects the WordPress plugin Custom Icons for Elementor up to version 0.3.3. It is an Unrestricted Upload of File with Dangerous Type vulnerability that allows uploading a Web Shell to the web server. Root cause: insufficient validation for uploaded files in the plugin, enabling ar...

6.6CVSS5.9AI score0.00324EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/23 3:31 p.m.44 views

CVE-2024-49676 WordPress Custom Icons for Elementor plugin <= 0.3.3 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Michael Bourne Custom Icons for Elementor custom-icons-for-elementor allows Upload a Web Shell to a Web Server.This issue affects Custom Icons for Elementor: from n/a through = 0.3.3...

6.6CVSS0.00324EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/23 12:00 a.m.14 views

WordPress plugin Custom Icons for Elementor 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

6.6CVSS7AI score0.00324EPSS
SaveExploits0References1
Rows per page
Query Builder