Lucene search
+L

9 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•10 views

EUVD-2025-4732

Malicious code in bioql PyPI...

6.1CVSS7.9AI score0.00341EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/04/03 12:00 a.m.•15 views

WordPress plugin lexicata Lexicata 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

7.1CVSS6.9AI score0.00237EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/21 8:38 a.m.•12 views

CVE-2024-12069

The Lexicata plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.0.16. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that execute i...

6.1CVSS6.3AI score0.00341EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/19 8:15 a.m.•12 views

CVE-2024-12069

The Lexicata plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.0.16. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that execute i...

6.1CVSS0.00341EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/02/19 7:32 a.m.•8 views

CVE-2024-12069 Lexicata <= 1.0.16 - Reflected Cross-Site Scripting

The Lexicata plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.0.16. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that execute i...

6.1CVSS6.2AI score0.00341EPSS
SaveExploits0References2
CVE
CVE
•added 2025/02/19 7:32 a.m.•48 views

CVE-2024-12069

CVE-2024-12069 : The Lexicata WordPress plugin is vulnerable to a Reflected Cross‑Site Scripting (XSS) due to using add_query_arg without proper escaping in the URL, affecting versions up to and including 1.0.16. This allows unauthenticated attackers to inject arbitrary scripts that execute if a ...

6.1CVSS6AI score0.00341EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/02/19 7:32 a.m.•29 views

CVE-2024-12069 Lexicata <= 1.0.16 - Reflected Cross-Site Scripting

The Lexicata plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.0.16. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that execute i...

6.1CVSS0.00341EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/02/19 12:00 a.m.•4 views

PT-2025-7329

Name of the Vulnerable Software and Affected Versions Lexicata plugin for WordPress versions up to, and including, 1.0.16 Description The issue arises from the use of add query arg without proper escaping on the URL, leading to Reflected Cross-Site Scripting. This allows unauthenticated attackers...

6.1CVSS0.00341EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/02/19 12:00 a.m.•12 views

WordPress plugin Lexicata 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

6.1CVSS8.2AI score0.00341EPSS
SaveExploits0References2
Rows per page
Query Builder