Lucene search
K

9 matches found

Nuclei
Nuclei
added yesterday12 views

JustRows WordPress - Cross-Site Scripting

JustRows free WordPress plugin v0.2 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a...

7.1CVSS7.2AI score0.0055EPSS
Exploits1References1
Patchstack
Patchstack
added 2025/02/04 10:32 p.m.4 views

WordPress Justrows Free plugin <= 0.2 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin JustRows free versions = 0.2...

7.1CVSS6.5AI score0.0055EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2025/02/04 6:15 a.m.2 views

CVE-2024-13330

The JustRows free WordPress plugin through 0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS7.3AI score0.0055EPSS
Exploits1References1
NVD
NVD
added 2025/02/04 6:15 a.m.10 views

CVE-2024-13330

The JustRows free WordPress plugin through 0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS0.0055EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/02/04 6:0 a.m.7 views

CVE-2024-13330 Justrows Free <= 0.2 - Reflected XSS

The JustRows free WordPress plugin through 0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.5AI score0.0055EPSS
Exploits1References1
CVE
CVE
added 2025/02/04 6:0 a.m.59 views

CVE-2024-13330

The CVE-2024-13330 entry concerns the JustRows free WordPress plugin (versions up to 0.2). The flaw is a Reflected XSS caused by not sanitising/escaping a parameter before echoing it in the page, enabling an attacker to craft input that could be reflected back to high-privilege users (e.g., admin...

7.1CVSS6.3AI score0.0055EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2025/02/04 6:0 a.m.16 views

CVE-2024-13330 Justrows Free <= 0.2 - Reflected XSS

The JustRows free WordPress plugin through 0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

0.0055EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/02/04 12:0 a.m.3 views

PT-2025-2116

Name of the Vulnerable Software and Affected Versions JustRows free WordPress plugin versions 0.2 and earlier Description The issue arises from the plugin not sanitising and escaping a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting. This could be used...

7.1CVSS8.1AI score0.0055EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/02/04 12:0 a.m.1 views

WordPress plugin JustRows free 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.1CVSS7.6AI score0.0055EPSS
Exploits1References1
Rows per page
Query Builder