Lucene search
+L

8 matches found

EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2025-7884

Malicious code in bioql PyPI...

5.9CVSS9.2AI score0.00275EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/14 3:46 p.m.12 views

CVE-2025-28937

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lavacode Lava Ajax Search lava-ajax-search allows Stored XSS.This issue affects Lava Ajax Search: from n/a through = 1.1.9...

5.9CVSS7.2AI score0.00275EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/03/11 9:48 p.m.8 views

WordPress Lava Ajax Search plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nabil Irawan in WordPress Plugin Lava Ajax Search versions = 1.1.9...

5.9CVSS7.6AI score0.00275EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/03/11 9:15 p.m.11 views

CVE-2025-28937

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lavacode Lava Ajax Search lava-ajax-search allows Stored XSS.This issue affects Lava Ajax Search: from n/a through = 1.1.9...

5.9CVSS0.00275EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/11 9:01 p.m.6 views

CVE-2025-28937 WordPress Lava Ajax Search plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lavacode Lava Ajax Search lava-ajax-search allows Stored XSS.This issue affects Lava Ajax Search: from n/a through = 1.1.9...

5.9CVSS8.6AI score0.00275EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/11 9:01 p.m.49 views

CVE-2025-28937

CVE-2025-28937 describes a stored cross‑site scripting (XSS) flaw in the WordPress plugin Lava Ajax Search (versions up to and including 1.1.9). The impact is stored XSS via improper neutralization of input during web page generation. The vulnerability affects Lava Ajax Search as packaged/observe...

5.9CVSS7.2AI score0.00275EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/11 9:01 p.m.26 views

CVE-2025-28937 WordPress Lava Ajax Search plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lavacode Lava Ajax Search lava-ajax-search allows Stored XSS.This issue affects Lava Ajax Search: from n/a through = 1.1.9...

5.9CVSS0.00275EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/11 12:00 a.m.9 views

WordPress plugin Lava Ajax Search 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...

5.9CVSS8.2AI score0.00275EPSS
SaveExploits0References2
Rows per page
Query Builder