Lucene search
+L

53 matches found

Cvelist
Cvelist
•added 2023/11/07 3:13 p.m.•37 views

CVE-2023-25983 WordPress KB Support Plugin <= 1.5.84 is vulnerable to CSV Injection

Improper Neutralization of Formula Elements in a CSV File vulnerability in WPOmnia KB Support.This issue affects KB Support: from n/a through 1.5.84...

8.9AI score0.01117EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/07 3:13 p.m.•66 views

CVE-2023-25983

CVE-2023-25983 affects the WordPress KB Support plugin (WPOmnia KB Support), specifically versions

8.8CVSS8.5AI score0.01117EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/07 12:00 a.m.•3 views

CVE-2023-25983: Improper Neutralization of Formula Elements in a CSV File

Improper Neutralization of Formula Elements in a CSV File vulnerability in WPOmnia KB Support.This issue affects KB Support: from n/a through 1.5.84...

8.8CVSS7.8AI score0.01117EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/11/07 12:00 a.m.•18 views

PT-2023-20408 · Unknown · Wpomnia Kb Support

Name of the Vulnerable Software and Affected Versions: WPOmnia KB Support versions 1.5.84 and earlier Description: The issue is related to the improper neutralization of formula elements in a CSV file, which affects WPOmnia KB Support. Recommendations: For versions 1.5.84 and earlier, update to a...

8.8CVSS9.3AI score0.01117EPSS
SaveExploits0References6
Patchstack
Patchstack
•added 2023/02/24 12:00 a.m.•19 views

WordPress KB Support Plugin <= 1.5.84 is vulnerable to CSV Injection

Software KB Support Type Plugin Vulnerable versions = 1.5.84 Fixed in 1.5.85 OWASP Top 10 A1: Injection Classification CSV Injection CVE CVE-2023-25983 Patch priority Low CVSS severity Low 4.4 Developer Claim ownership PSID b58305c78eef Credits Rafshanzani Suhada Required privilege Subscriber...

8.8CVSS7.2AI score0.01117EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2022/04/15 5:15 p.m.•16 views

CVE-2022-27852

Multiple Unauthenticated Stored Cross-Site Scripting XSS vulnerabilities in KB Support WordPress plugin = 1.5.5 versions...

6.1CVSS6.4AI score0.00702EPSS
SaveExploits0References1
Prion
Prion
•added 2022/04/15 5:15 p.m.•24 views

Cross site scripting

Multiple Unauthenticated Stored Cross-Site Scripting XSS vulnerabilities in KB Support WordPress plugin = 1.5.5 versions...

4.3CVSS6AI score0.00702EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/04/15 4:24 p.m.•96 views

CVE-2022-27852

The CVE-2022-27852 entry concerns the WordPress plugin KB Support (

6.1CVSS6.1AI score0.00702EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2022/04/15 1:36 p.m.•9 views

CVE-2022-27852

Multiple Unauthenticated Stored Cross-Site Scripting XSS vulnerabilities in KB Support WordPress plugin = 1.5.5 versions...

6.1CVSS6.4AI score0.00702EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2022/04/15 12:00 a.m.•24 views

WordPress KB Support – WordPress Help Desk plugin <= 1.5.5 - Multiple Unauthenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Unauthenticated Stored Cross-Site Scripting XSS vulnerabilities were discovered by Ngo Van Thien Patchstack Alliance in WordPress KB Support – WordPress Help Desk plugin versions = 1.5.5. Solution Update the WordPress KB Support plugin to the latest available version at least 1.5.6...

6.1CVSS1.1AI score0.00702EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2022/04/15 12:00 a.m.•17 views

WordPress plugin KB Support 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.1CVSS6AI score0.00702EPSS
SaveExploits0References4
WPVulnDB
WPVulnDB
•added 2022/04/15 12:00 a.m.•23 views

KB Support <= 1.5.5 - Unauthenticated Stored Cross-Site Scripting

The plugin does not sanitise and escape multiple parameters, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks...

6.1CVSS3.7AI score0.00702EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/15 12:00 a.m.•2 views

CVE-2022-27852: Improper Neutralization of Input During Web Page Generation

Multiple Unauthenticated Stored Cross-Site Scripting XSS vulnerabilities in KB Support WordPress plugin = 1.5.5 versions...

6.1CVSS6.4AI score0.00702EPSS
SaveExploits0References2
Rows per page
Query Builder