Lucene search
K

17 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2025-5655

Malicious code in bioql PyPI...

7.1CVSS9.2AI score0.00232EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-25157

Malicious code in bioql PyPI...

4.3CVSS4.9AI score0.00142EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:11 a.m.5 views

CVE-2022-1885

The Cimy Header Image Rotator WordPress plugin through 6.1.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

4.3CVSS6.7AI score0.00142EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/03/05 3:26 p.m.3 views

CVE-2025-25089

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in appten Image Rotator appten-image-rotator allows Reflected XSS.This issue affects Image Rotator: from n/a through = 2.0...

7.1CVSS7.2AI score0.00232EPSS
Exploits0References1
NVD
NVD
added 2025/03/03 2:15 p.m.3 views

CVE-2025-25089

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in appten Image Rotator appten-image-rotator allows Reflected XSS.This issue affects Image Rotator: from n/a through = 2.0...

7.1CVSS0.00232EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/03 1:30 p.m.10 views

CVE-2025-25089 WordPress Image Rotator plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in appten Image Rotator appten-image-rotator allows Reflected XSS.This issue affects Image Rotator: from n/a through = 2.0...

7.1CVSS0.00232EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/03 1:30 p.m.4 views

CVE-2025-25089 WordPress Image Rotator plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in appten Image Rotator allows Reflected XSS. This issue affects Image Rotator: from n/a through 2.0...

7.1CVSS7.1AI score0.00232EPSS
Exploits0References1
CVE
CVE
added 2025/03/03 1:30 p.m.62 views

CVE-2025-25089

CVE-2025-25089 describes a Reflected Cross-Site Scripting vulnerability in the WordPress plugin Image Rotator (affected: Image Rotator &lt;= 2.0). The issue stems from improper neutralization of input during web page generation , per description. The CVSS data (v3.1) assigns a base score of 7.1 (...

7.1CVSS7.2AI score0.00232EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/03/03 12:0 a.m.2 views

WordPress plugin Image Rotator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS8.2AI score0.00232EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/02/03 4:12 p.m.2 views

WordPress Image Rotator plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Dimas Maulana in WordPress Plugin Image Rotator versions = 2.0...

7.1CVSS6.1AI score0.00232EPSS
Exploits0Affected Software1
NVD
NVD
added 2022/06/27 9:15 a.m.11 views

CVE-2022-1885

The Cimy Header Image Rotator WordPress plugin through 6.1.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

4.3CVSS0.00142EPSS
Exploits2References1
Prion
Prion
added 2022/06/27 9:15 a.m.16 views

Cross site request forgery (csrf)

The Cimy Header Image Rotator WordPress plugin through 6.1.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

4.3CVSS4.5AI score0.00142EPSS
Exploits2References1Affected Software1
CVE
CVE
added 2022/06/27 8:58 a.m.73 views

CVE-2022-1885

CVE-2022-1885 affects the Cimy Header Image Rotator WordPress plugin up to version 6.1.1. The root cause is missing CSRF protection when updating settings, enabling an attacker to induce a logged-in admin to change configurations via CSRF. Multiple sources (NVD/Red Hat/CVE lists and WPScan/WP vul...

4.3CVSS4.5AI score0.00142EPSS
Exploits2References1Affected Software1
Cvelist
Cvelist
added 2022/06/27 8:58 a.m.10 views

CVE-2022-1885 Cimy Header Image Rotator <= 6.1.1 - Arbitrary Settings Update via CSRF

The Cimy Header Image Rotator WordPress plugin through 6.1.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

4.9AI score0.00142EPSS
Exploits2References1
CNNVD
CNNVD
added 2022/06/27 12:0 a.m.1 views

WordPress plugin Cimy Header Image Rotator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Cimy Header Image Rotator plugin 6.1.1 and earlier versions are vulnerable to cross-site...

4.3CVSS5.4AI score0.00142EPSS
Exploits2References2
Packet Storm
Packet Storm
added 2019/03/04 12:0 a.m.153 views

Joomla ModPPCSimpleSpotLight 1.2 / 3.0 CSRF / Shell Upload

Exploit Title : Joomla ModPPCSimpleSpotLight Modules 1.2/3.0 CSRF Shell Upload Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 04/03/2019 Vendor Homepage : pixelpointcreative.com Software Download Link :...

0.1AI score
Exploits0
0day.today
0day.today
added 2012/03/22 12:0 a.m.66 views

Joomla 2.5 Modules Simple Spotlight Upload Shell

Exploit for php platform in category web applications Joomla 2.5 Modules Simple Spotlight Upload Shell 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 | | | | || | | | / \ | / | / / 3 1 | | | | | || | | | | | | | | || | / / 7 3 | Exploit Modules Joomla by...

7.1AI score
Exploits0
Rows per page
Query Builder