Lucene search
+L

6397 matches found

CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•19 views

WordPress plugin SEO Pyramid 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...

7.1CVSS6AI score0.0025EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•17 views

WordPress plugin MDTF 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

6.5CVSS5.7AI score0.00176EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•14 views

WordPress Plugin CropRefine 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-sit...

7.1CVSS6AI score0.00296EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•17 views

WordPress plugin Werk aan de Muur 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.9CVSS5.7AI score0.00225EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/22 12:00 a.m.•5 views

PT-2025-43344

Name of the Vulnerable Software and Affected Versions Pie Calendar versions through 1.2.9 Description The software contains a flaw due to improper neutralization of input during web page generation, which may allow for cross-site scripting. Recommendations Update Pie Calendar to a version later...

6.5CVSS5.7AI score0.00217EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•16 views

WordPress plugin Grid Plus 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6AI score0.0025EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/22 12:00 a.m.•5 views

PT-2025-43378

Name of the Vulnerable Software and Affected Versions MediaWiki CookieConsent extension versions 0.1.0 through 1.9.9 Description The Wikimedia Foundation MediaWiki CookieConsent extension contains a flaw related to improper input neutralization during web page generation, potentially leading to...

2.1CVSS5.9AI score0.00293EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2025/10/22 12:00 a.m.•19 views

The vulnerability of TP-Link Omada network gateways’ microprogramming software lies in the lack of measures to neutralize specific elements, allowing attackers to execute arbitrary commands on the operating system.

The vulnerability of TP-Link Omada network gateways’ microprogramming software is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands on the operating system...

10CVSS6.4AI score0.01015EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•18 views

WordPress plugin Simple Finance Calculator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS5.6AI score0.00243EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•16 views

WordPress plugin Easy Woocommerce Customizer 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A cross-site scripti...

7.1CVSS6AI score0.00235EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•18 views

WordPress plugin WC Return products cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS5.7AI score0.0025EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/22 12:00 a.m.•2 views

PT-2025-43357

Name of the Vulnerable Software and Affected Versions WP Travel Gutenberg Blocks versions through 3.9.2 Description The software contains a flaw due to improper neutralization of input during web page generation, which may allow for cross-site scripting. Recommendations Update WP Travel Gutenberg...

6.5CVSS5.7AI score0.00176EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•18 views

WordPress plugin Nks Email Subscription Popup Cross Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS5.7AI score0.00287EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•17 views

WordPress plugin Nifty Backups 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

7.1CVSS6AI score0.0025EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/21 8:48 a.m.•9 views

CVE-2025-10612 XSS in GiSoft's City Guide

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in giSoft Information Technologies City Guide allows Reflected XSS. This issue affects City Guide: before 1.4.45...

6.1CVSS5.8AI score0.00204EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/21 8:48 a.m.•17 views

EUVD-2025-35158

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in giSoft Information Technologies City Guide allows Reflected XSS.This issue affects City Guide: before 1.4.45...

6.1CVSS5.8AI score0.00204EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/21 5:15 a.m.•18 views

CVE-2025-62702

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - PageTriage Extension allows Stored XSS.This issue affects Mediawiki - PageTriage Extension: from master before 1.44...

6.9CVSS0.00432EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/10/21 4:02 a.m.•7 views

CVE-2025-62695 Stored XSS through system messages

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Stored XSS.This issue affects Mediawiki - WikiLambda Extension: master...

6.9CVSS5.8AI score0.00432EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/10/21 12:00 a.m.•4 views

PT-2025-42859

Name of the Vulnerable Software and Affected Versions Mediawiki - WikiLambda Extension versions prior to master. Description A flaw exists in the Mediawiki - WikiLambda Extension related to improper input neutralization during web page generation, leading to a Stored Cross-site Scripting XSS...

6.9CVSS5.9AI score0.00432EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2025/10/21 12:00 a.m.•20 views

MediaWiki - PageTriage Extension 安全漏洞

MediaWiki - PageTriage Extension is an open source page triage extension for MediaWiki. A security vulnerability exists in MediaWiki - PageTriage Extension versions prior to 1.44, which stems from improper input neutralization and could lead to a stored cross-site scripting attack...

6.9CVSS5.5AI score0.00432EPSS
SaveExploits0References2
Rows per page
Query Builder