Lucene search
+L

2172 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/20 12:00 a.m.•8 views

CVE-2018-20978: Improper Neutralization of Input During Web Page Generation

The wp-all-import plugin before 3.4.7 for WordPress has XSS...

6.1CVSS5.7AI score0.00905EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/20 12:00 a.m.•7 views

CVE-2017-18567: Improper Neutralization of Input During Web Page Generation

The wp-all-import plugin before 3.4.6 for WordPress has XSS...

6.1CVSS5.7AI score0.00905EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/20 12:00 a.m.•4 views

CVE-2017-18529: Improper Neutralization of Input During Web Page Generation

The promobar plugin before 1.1.1 for WordPress has multiple XSS issues...

6.1CVSS5.7AI score0.01621EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/20 12:00 a.m.•8 views

CVE-2016-10913: Improper Neutralization of Input During Web Page Generation

The wp-latest-posts plugin before 3.7.5 for WordPress has XSS...

6.1CVSS5.7AI score0.00913EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/20 12:00 a.m.•9 views

CVE-2017-18568: Improper Neutralization of Input During Web Page Generation

The my-wp-translate plugin before 1.0.4 for WordPress has XSS...

6.1CVSS5.7AI score0.00905EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/20 12:00 a.m.•5 views

CVE-2017-18532: Improper Neutralization of Input During Web Page Generation

The realty plugin before 1.1.0 for WordPress has multiple XSS issues...

6.1CVSS5.7AI score0.01441EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/14 12:00 a.m.•8 views

CVE-2016-10881: Improper Neutralization of Input During Web Page Generation

The google-document-embedder plugin before 2.6.2 for WordPress has XSS...

6.1CVSS5.7AI score0.00951EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/13 12:00 a.m.•6 views

CVE-2015-9297: Improper Neutralization of Input During Web Page Generation

The events-manager plugin before 5.6 for WordPress has XSS...

6.1CVSS5.7AI score0.00924EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/13 12:00 a.m.•6 views

CVE-2015-9302: Improper Neutralization of Input During Web Page Generation

The simple-fields plugin before 1.4.11 for WordPress has XSS...

6.1CVSS5.7AI score0.00951EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/12 12:00 a.m.•7 views

CVE-2016-10873: Improper Neutralization of Input During Web Page Generation

The wp-database-backup plugin before 4.3.3 for WordPress has XSS...

6.1CVSS5.7AI score0.00924EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/12 12:00 a.m.•5 views

CVE-2019-14945: Improper Neutralization of Input During Web Page Generation

The ultimate-member plugin before 2.0.54 for WordPress has XSS...

5.4CVSS5.7AI score0.00882EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/12 12:00 a.m.•6 views

CVE-2016-10875: Improper Neutralization of Input During Web Page Generation

The wp-database-backup plugin before 4.3.1 for WordPress has XSS...

6.1CVSS5.7AI score0.00924EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/12 12:00 a.m.•3 views

CVE-2017-18501: Improper Neutralization of Input During Web Page Generation

The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues...

6.1CVSS5.7AI score0.0141EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/12 12:00 a.m.•4 views

CVE-2019-14967: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Frappe Framework 10, 11 before 11.1.46, and 12. There exists an XSS vulnerability...

6.1CVSS5.7AI score0.01231EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/12 12:00 a.m.•5 views

CVE-2017-18503: Improper Neutralization of Input During Web Page Generation

The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS...

6.1CVSS5.7AI score0.00922EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/29 12:00 a.m.•7 views

CVE-2019-1020010: Improper Neutralization of Input During Web Page Generation

Misskey before 10.102.4 allows hijacking a user's token...

6.1CVSS5.8AI score0.01263EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/10 12:00 a.m.•10 views

CVE-2019-0326: Improper Neutralization of Input During Web Page Generation

SAP BusinessObjects Business Intelligence Platform BI Workspace Enterprise, versions 4.1, 4.2, 4.3, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

6.1CVSS5.7AI score0.01325EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/10 12:00 a.m.•6 views

CVE-2018-19574: Improper Neutralization of Input During Web Page Generation

GitLab CE/EE, versions 7.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in the OAuth authorization page...

5.4CVSS7.6AI score0.00983EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/06/12 12:00 a.m.•6 views

CVE-2019-0311: Improper Neutralization of Input During Web Page Generation

Automotive Dealer Portal in SAP R/3 Enterprise Application versions: 600, 602, 603, 604, 605, 606, 616, 617 does not sufficiently encode user-controlled inputs, this makes it possible for an attacker to send unwanted scripts to the browser of the victim using unwanted input and execute malicious...

6.1CVSS6AI score0.008EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/05/29 12:00 a.m.•8 views

CVE-2018-18631: Improper Neutralization of Input During Web Page Generation

mailboxd component in Synacor Zimbra Collaboration Suite 8.6, 8.7 before 8.7.11 Patch 7, and 8.8 before 8.8.10 Patch 2 has Persistent XSS...

6.1CVSS5.7AI score0.00988EPSS
SaveExploits0References2
Rows per page
Query Builder