Lucene search
+L

865 matches found

OSV
OSV
added 2024/10/05 3:15 p.m.5 views

CVE-2024-47392

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BdThemes Element Pack Elementor Addons allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 5.7.5...

5.4CVSS5.8AI score0.00248EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/10/05 12:0 a.m.5 views

WordPress plugin LiteSpeed Cache 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6.2AI score0.00248EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/10/05 12:0 a.m.5 views

WordPress plugin Online Booking & Scheduling Calendar for WordPress by vcita 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

7.1CVSS6.1AI score0.00311EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/10/04 12:0 a.m.5 views

Microchip TimeProvider 4100 安全漏洞

Microchip TimeProvider 4100 is a gateway clock from Microchip, Inc. A security vulnerability exists in Microchip TimeProvider 4100 versions prior to 2.4.7, which arises from improper input neutralization during web page generation and is susceptible to cross-site scripting attacks...

6.1CVSS6AI score0.11528EPSS
Exploits0References3
OSV
OSV
added 2024/09/27 12:15 p.m.6 views

CVE-2024-8608

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Oceanic Software ValeApp allows Stored XSS.This issue affects ValeApp: before v2.0.0...

5.4CVSS5.8AI score0.00277EPSS
Exploits0References1
OSV
OSV
added 2024/09/25 8:15 a.m.6 views

CVE-2024-47303

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Livemesh Livemesh Addons for Elementor allows Stored XSS.This issue affects Livemesh Addons for Elementor: from n/a through 8.5...

5.4CVSS5.8AI score0.00226EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/09/25 12:0 a.m.5 views

Talent BAP Automation 跨站脚本漏洞

Talent BAP Automation is an application from Talent, Inc. A cross-site scripting vulnerability exists in Talent BAP Automation versions prior to 30840, which stems from improper input neutralization during web page generation, making it susceptible to stored cross-site scripting attacks...

9.3CVSS6AI score0.00413EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/09/25 12:0 a.m.4 views

WordPress plugin Livemesh Addons for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS6.1AI score0.00226EPSS
Exploits0References2
OSV
OSV
added 2024/09/18 3:15 p.m.8 views

CVE-2024-5959

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Eliz Software Panel allows Stored XSS.This issue affects Panel: before v2.3.24...

5.4CVSS5.8AI score0.00247EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/09/12 12:0 a.m.13 views

Beckhoff TwinCAT/BSD Improper Neutralization of Input During Web Page Generation (CVE-2024-41174)

The IPC-Diagnostics package in TwinCAT/BSD is susceptible to improper input neutralization by a low-privileged local attacker. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

7.3CVSS5.4AI score0.00239EPSS
Exploits0References2
OSV
OSV
added 2024/08/29 6:15 p.m.5 views

CVE-2024-43964

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Michael Leithold DSGVO All in one for WP allows Stored XSS.This issue affects DSGVO All in one for WP: from n/a through 4.5...

5.4CVSS5.8AI score0.00246EPSS
Exploits0References1
OSV
OSV
added 2024/08/29 6:15 p.m.3 views

CVE-2024-43958

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Gianni Porto IntoTheDark allows Reflected XSS.This issue affects IntoTheDark: from n/a through 1.0.5...

6.1CVSS5.8AI score0.00256EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/08/29 12:0 a.m.4 views

WordPress plugin Easy Digital Downloads SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

9.8CVSS7.6AI score0.02588EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/08/29 12:0 a.m.5 views

WordPress plugin Brickscore 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

7.1CVSS6AI score0.00256EPSS
Exploits0References2
Redos
Redos
added 2024/08/28 12:0 a.m.24 views

ROS-20240827-07

Vulnerability in UnlinkedWikibase extension of a software tool for implementing hypertext environments MediaWiki is related to improper input neutralization during web page creation. Exploitation The vulnerability could allow an attacker acting remotely to perform cross-site scripting attacks XSS...

9.8CVSS6.8AI score0.00473EPSS
Exploits0
NVD
NVD
added 2024/08/27 8:15 a.m.25 views

CVE-2024-41174

The IPC-Diagnostics package in TwinCAT/BSD is susceptible to improper input neutralization by a low-privileged local attacker...

7.3CVSS0.00239EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/08/27 8:1 a.m.23 views

CVE-2024-41174 Beckhoff: Improper input neutralization vulnerability in the IPC-Diagnostics package in TwinCAT/BSD

The IPC-Diagnostics package in TwinCAT/BSD is susceptible to improper input neutralization by a low-privileged local attacker...

7.3CVSS6.7AI score0.00239EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/08/27 8:1 a.m.27 views

CVE-2024-41174 Beckhoff: Improper input neutralization vulnerability in the IPC-Diagnostics package in TwinCAT/BSD

The IPC-Diagnostics package in TwinCAT/BSD is susceptible to improper input neutralization by a low-privileged local attacker...

7.3CVSS0.00239EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2024/08/18 10:15 p.m.4 views

CVE-2024-43278

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Phi Phan Meta Field Block allows Stored XSS.This issue affects Meta Field Block: from n/a through 1.2.13...

6.5CVSS5.2AI score0.00239EPSS
Exploits0References2
OSV
OSV
added 2024/08/18 2:15 p.m.4 views

CVE-2024-43324

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CleverSoft Clever Addons for Elementor allows Stored XSS.This issue affects Clever Addons for Elementor: from n/a through 2.2.0...

4.8CVSS5.8AI score0.00245EPSS
Exploits0References1
Rows per page
Query Builder