Lucene search
+L

5783 matches found

CNNVD
CNNVD
added 2024/10/05 12:00 a.m.12 views

WordPress plugin JobSearch 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

7.1CVSS6.2AI score0.00304EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/10/05 12:00 a.m.35 views

WordPress plugin Author Avatars List/Block 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin Author Avatars...

6.5CVSS6.1AI score0.00247EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/10/05 12:00 a.m.11 views

PT-2024-32601 · Unknown · Webvitaly Page-List

Name of the Vulnerable Software and Affected Versions: Webvitaly Page-list versions n/a through 5.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. The vulnerability is du...

6.5CVSS5.6AI score0.00247EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/10/05 12:00 a.m.8 views

WordPress plugin Gallery Lightbox 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

5.9CVSS6.2AI score0.00246EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/10/05 12:00 a.m.5 views

WordPress plugin WPCOM Member 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS6.1AI score0.00311EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/10/05 12:00 a.m.8 views

WordPress plugin Jeg Elementor Kit 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

6.5CVSS6.2AI score0.00248EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/10/05 12:00 a.m.11 views

WordPress plugin BSK Forms Blacklist 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

7.1CVSS6.2AI score0.00287EPSS
SaveExploits0References2
CVE
CVE
added 2024/10/04 7:41 p.m.74 views

CVE-2024-43687

The CVE-2024-43687 entry concerns Microchip TimeProvider 4100 banner config modules and an XSS flaw caused by improper input neutralization during web page generation. Affected versions are 1.0 through 2.4.6 ( TimeProvider 4100 ), with the advisory noting versions up to 2.4.7 fixed. Impact is Cro...

7.7CVSS6.1AI score0.00786EPSS
SaveExploits3References2Affected Software1
CNNVD
CNNVD
added 2024/10/04 12:00 a.m.8 views

Microchip TimeProvider 4100 安全漏洞

Microchip TimeProvider 4100 is a gateway clock from Microchip, Inc. A security vulnerability exists in Microchip TimeProvider 4100 versions prior to 2.4.7, which arises from improper input neutralization during web page generation and is susceptible to cross-site scripting attacks...

6.1CVSS6AI score0.12156EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/10/01 1:25 a.m.48 views

CVE-2024-47396 WordPress Move Addons for Elementor plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in moveaddons Move Addons for Elementor move-addons allows Stored XSS.This issue affects Move Addons for Elementor: from n/a through = 1.3.3...

6.5CVSS0.00263EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/30 1:15 p.m.16 views

CVE-2024-47641

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Muhammad Shakeel Confetti Fall Animation confetti-fall-animation allows Stored XSS.This issue affects Confetti Fall Animation: from n/a through = 1.3.0...

6.5CVSS0.00247EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/27 12:15 p.m.9 views

CVE-2024-8608

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Oceanic Software ValeApp allows Stored XSS.This issue affects ValeApp: before v2.0.0...

5.4CVSS5.8AI score0.00279EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/25 8:15 a.m.10 views

CVE-2024-47303

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Livemesh Livemesh Addons for Elementor allows Stored XSS.This issue affects Livemesh Addons for Elementor: from n/a through 8.5...

5.4CVSS5.8AI score0.00226EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/09/25 12:00 a.m.8 views

WordPress plugin Livemesh Addons for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS6.1AI score0.00226EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/09/25 12:00 a.m.9 views

Talent BAP Automation 跨站脚本漏洞

Talent BAP Automation is an application from Talent, Inc. A cross-site scripting vulnerability exists in Talent BAP Automation versions prior to 30840, which stems from improper input neutralization during web page generation, making it susceptible to stored cross-site scripting attacks...

9.3CVSS6AI score0.00417EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/09/25 12:00 a.m.8 views

WordPress plugin Testimonials 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

7.1CVSS5.8AI score0.00286EPSS
SaveExploits0References2
CVE
CVE
added 2024/09/23 11:31 a.m.49 views

CVE-2024-7835

CVE-2024-7835 describes a Reflected XSS in Exnet Informatics Software Ferry Reservation System. The issue stems from improper neutralization of input during web page generation, allowing attacker-controlled input to be reflected in the page. Affected versions are the Ferry Reservation System prio...

8.8CVSS5.8AI score0.00417EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/09/23 12:00 a.m.7 views

Exnet Informatics Software Ferry Reservation System 跨站脚本漏洞

Exnet Informatics Software Ferry Reservation System is a ferry reservation system from Exnet Informatics Software. A cross-site scripting vulnerability exists in versions prior to Exnet Informatics Software Ferry Reservation System 240805-002, which stems from improper input neutralization during...

8.8CVSS6AI score0.00417EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/09/19 12:00 a.m.4 views

Ece Electronic Ticket System 跨站脚本漏洞

Ece Electronic Ticket System is an electronic ticket system from Ece Corporation. A cross-site scripting vulnerability exists in the Ece Electronic Ticket System that stems from improper input neutralization during web page generation...

9.3CVSS6.2AI score0.00417EPSS
SaveExploits0References2
OSV
OSV
added 2024/09/18 3:15 p.m.10 views

CVE-2024-5959

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Eliz Software Panel allows Stored XSS.This issue affects Panel: before v2.3.24...

5.4CVSS5.8AI score0.00249EPSS
SaveExploits0References1
Rows per page
Query Builder