Lucene search
K

17 matches found

RedhatCVE
RedhatCVE
added 2025/12/10 3:13 p.m.1 views

CVE-2025-62109

Insertion of Sensitive Information Into Sent Data vulnerability in INFINITUM FORM Geo Controller cf-geoplugin allows Retrieve Embedded Sensitive Data.This issue affects Geo Controller: from n/a through = 8.9.4...

5.3CVSS6.9AI score0.00037EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/09 6:30 p.m.1 views

EUVD-2025-202031

Insertion of Sensitive Information Into Sent Data vulnerability in INFINITUM FORM Geo Controller cf-geoplugin allows Retrieve Embedded Sensitive Data.This issue affects Geo Controller: from n/a through = 8.9.4...

6.4AI score0.00037EPSS
Exploits0References2
NVD
NVD
added 2025/12/09 4:18 p.m.1 views

CVE-2025-62109

Insertion of Sensitive Information Into Sent Data vulnerability in INFINITUM FORM Geo Controller cf-geoplugin allows Retrieve Embedded Sensitive Data.This issue affects Geo Controller: from n/a through = 8.9.4...

5.3CVSS0.00037EPSS
Exploits0References1
CVE
CVE
added 2025/12/09 2:52 p.m.7 views

CVE-2025-62109

CVE-2025-62109 maps to a WordPress Geo Controller plugin cf-geoplugin information disclosure vulnerability. Connected sources describe an insertion of sensitive information into sent data, enabling retrieval of embedded sensitive data, affecting Geo Controller versions up to 8.9.4. The weakness i...

5.3CVSS6.5AI score0.00037EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.2 views

PT-2025-49998

Insertion of Sensitive Information Into Sent Data vulnerability in INFINITUM FORM Geo Controller cf-geoplugin allows Retrieve Embedded Sensitive Data.This issue affects Geo Controller: from n/a through = 8.9.4...

6.9AI score0.00037EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-28372

Malicious code in bioql PyPI...

6.5CVSS8.6AI score0.00178EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-28158

Malicious code in bioql PyPI...

9CVSS6.6AI score0.00168EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:15 a.m.3 views

CVE-2024-30451

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in INFINITUM FORM Geo Controller allows Stored XSS.This issue affects Geo Controller: from n/a through 8.6.4...

6.5CVSS8.7AI score0.00178EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 9:33 a.m.4 views

CVE-2024-30227

Deserialization of Untrusted Data vulnerability in INFINITUM FORM Geo Controller.This issue affects Geo Controller: from n/a through 8.6.4...

9CVSS5.2AI score0.00168EPSS
Exploits0References1
NVD
NVD
added 2024/03/29 5:15 p.m.10 views

CVE-2024-30451

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in INFINITUM FORM Geo Controller allows Stored XSS.This issue affects Geo Controller: from n/a through 8.6.4...

6.5CVSS6.4AI score0.00178EPSS
Exploits0References1
CVE
CVE
added 2024/03/29 4:42 p.m.56 views

CVE-2024-30451

CVE-2024-30451 : The Red Hat page confirms an improper input neutralization in the INFINITUM Geo Controller (Geo Controller cf-geoplugin) WordPress plugin, causing a Stored XSS. Affected versions are Geo Controller up to 8.6.4 (inclusive). Root cause: input is not properly sanitized during web pa...

6.5CVSS8.7AI score0.00178EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/03/29 4:42 p.m.15 views

CVE-2024-30451 WordPress Geo Controller plugin <= 8.6.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in INFINITUM FORM Geo Controller allows Stored XSS.This issue affects Geo Controller: from n/a through 8.6.4...

6.5CVSS6.6AI score0.00178EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/03/29 12:0 a.m.2 views

PT-2024-23380 · Unknown · Infinitum Form Geo Controller

Name of the Vulnerable Software and Affected Versions: INFINITUM FORM Geo Controller versions n/a through 8.6.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacke...

6.5CVSS9.1AI score0.00178EPSS
Exploits0References5
NVD
NVD
added 2024/03/28 5:15 a.m.7 views

CVE-2024-30227

Deserialization of Untrusted Data vulnerability in INFINITUM FORM Geo Controller.This issue affects Geo Controller: from n/a through 8.6.4...

9CVSS9.2AI score0.00168EPSS
Exploits0References1
CVE
CVE
added 2024/03/28 4:55 a.m.42 views

CVE-2024-30227

The CVE-2024-30227 entry concerns the WordPress Geo Controller plugin (≤ 8.6.4). The vulnerability is due to Deserialization of Untrusted Data leading to PHP Object Injection, with unauthenticated exploitation possible. Impact is high (confidentiality, integrity, availability all affected) and CV...

9CVSS5.2AI score0.00168EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/03/28 4:55 a.m.12 views

CVE-2024-30227 WordPress Geo Controller plugin <= 8.6.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in INFINITUM FORM Geo Controller.This issue affects Geo Controller: from n/a through 8.6.4...

9CVSS9.3AI score0.00168EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/03/27 12:0 a.m.1 views

PT-2024-23272 · Unknown · Infinitum Form Geo Controller

Name of the Vulnerable Software and Affected Versions: INFINITUM FORM Geo Controller versions n/a through 8.6.4 Description: The issue is related to Deserialization of Untrusted Data, which affects the Geo Controller. Recommendations: For versions n/a through 8.6.4, at the moment, there is no...

9CVSS6.8AI score0.00168EPSS
Exploits0References4
Rows per page
Query Builder