CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Rapid7 Vulnerability Database (full)•added 2024/07/29 12:00 a.m.•4 views

CVE-2024-6487: Improper Neutralization of Input During Web Page Generation

The Inline Related Posts WordPress plugin before 3.8.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5.9CVSS5.9AI score0.00446EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2024/07/12 12:00 a.m.•2 views

CVE-2024-5626: Improper Neutralization of Input During Web Page Generation

The Inline Related Posts WordPress plugin before 3.7.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS5.8AI score0.0038EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2024/04/06 12:00 a.m.•3 views

CVE-2024-2444: Improper Neutralization of Input During Web Page Generation

The Inline Related Posts WordPress plugin before 3.5.0 does not sanitise and escape some of its settings, which could allow high privilege users such as Admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

4.8CVSS5.8AI score0.00424EPSS

SaveExploits2References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by