Lucene search
+L

6645 matches found

CNNVD
CNNVD
added 2024/10/29 12:00 a.m.14 views

WordPress plugin Extra Privacy for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

7.1CVSS6AI score0.00288EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/29 12:00 a.m.10 views

WordPress plugin Local Business Addons For Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPre...

6.5CVSS6AI score0.0027EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/29 12:00 a.m.10 views

PT-2024-33588 · Unknown · Rimon Habib Bp Member Type Manager

Name of the Vulnerable Software and Affected Versions: Rimon Habib BP Member Type Manager versions 1.01 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks...

7.1CVSS5.5AI score0.00288EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/10/29 12:00 a.m.10 views

WordPress plugin AffiliateX 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site...

6.5CVSS6AI score0.0024EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/29 12:00 a.m.17 views

PT-2024-33603 · Woocommerce · Woocommerce Maintenance Mode

Name of the Vulnerable Software and Affected Versions: WooCommerce Maintenance Mode versions prior to 2.0.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For...

7.1CVSS6.5AI score0.00288EPSS
SaveExploits0References5
OSV
OSV
added 2024/10/28 7:15 p.m.7 views

CVE-2024-50437

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AyeCode GeoDirectory allows Stored XSS.This issue affects GeoDirectory: from n/a through 2.3.80...

5.4CVSS5.8AI score0.00248EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/28 6:15 p.m.9 views

CVE-2024-50460

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in FirelightWP Firelight Lightbox allows Stored XSS.This issue affects Firelight Lightbox: from n/a through 2.3.3...

4.8CVSS5.8AI score0.00247EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/28 6:15 p.m.9 views

CVE-2024-50449

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in RedefiningTheWeb PDF Generator Addon for Elementor Page Builder allows Stored XSS.This issue affects PDF Generator Addon for Elementor Page Builder: from n/a through 1.7.4...

5.4CVSS5.8AI score0.00255EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/28 6:15 p.m.7 views

CVE-2024-50448

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in YITH YITH WooCommerce Product Add-Ons allows Reflected XSS.This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.14.1...

6.1CVSS5.8AI score0.00311EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/28 1:15 p.m.7 views

CVE-2024-50501

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Climax Themes Kata Plus allows Stored XSS.This issue affects Kata Plus: from n/a through 1.4.7...

5.4CVSS5.8AI score0.00255EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/28 1:15 p.m.10 views

CVE-2024-50471

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Checklist Trip Plan allows Stored XSS.This issue affects Trip Plan: from n/a through 1.0.10...

5.4CVSS5.8AI score0.00255EPSS
SaveExploits0References1
Veracode
Veracode
added 2024/10/28 5:56 a.m.15 views

Cross-site Scripting (XSS)

Wildfly is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper input handling in the Wildfly deployment system, allowing an attacker or insider to deploy a malicious payload that could trigger undesired behavior on the server...

7.3CVSS6.3AI score0.00638EPSS
SaveExploits0References15Affected Software1
CNNVD
CNNVD
added 2024/10/28 12:00 a.m.8 views

WordPress plugin Futurio Extra 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6.1AI score0.00246EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/28 12:00 a.m.10 views

OpenText Operations Agent 安全漏洞

OpenText Operations Agent is a software from OpenText Canada that is used to manage and monitor OpenText products and solutions. A security vulnerability exists in OpenText Operations Agent, which is caused by improper input neutralization during web page generation and is susceptible to cross-si...

4.8CVSS6AI score0.00183EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/28 12:00 a.m.11 views

WordPress plugin Cozy Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.4CVSS6.1AI score0.00279EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/28 12:00 a.m.9 views

WordPress plugin Amilia Store 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6AI score0.0024EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/28 12:00 a.m.12 views

WordPress plugin WordPress Meta Data and Taxonomies Filter 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6AI score0.00261EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/28 12:00 a.m.11 views

WordPress plugin Church Admin 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6AI score0.00308EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/28 12:00 a.m.8 views

WordPress plugin EmbedPress 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

6.5CVSS6AI score0.00248EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/28 12:00 a.m.10 views

PT-2024-34214 · Unknown · Astra Widgets

Name of the Vulnerable Software and Affected Versions: Astra Widgets versions 1.2.14 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For...

6.5CVSS5.6AI score0.0024EPSS
SaveExploits0References6
Rows per page
Query Builder