Lucene search
+L

30 matches found

Vulnrichment
Vulnrichment
added 2024/12/12 5:24 a.m.13 views

CVE-2024-11359 Library Bookshelves <= 5.8 - Reflected Cross-Site Scripting

The Library Bookshelves plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 5.8. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pag...

6.1CVSS6.4AI score0.00382EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/12/12 12:0 a.m.8 views

WordPress plugin Library Bookshelves 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.1CVSS7.8AI score0.00382EPSS
Exploits0References3
NVD
NVD
added 2024/12/02 2:15 p.m.56 views

CVE-2024-52453

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in photonicgnostic Library Bookshelves library-bookshelves allows Reflected XSS.This issue affects Library Bookshelves: from n/a through = 5.8...

7.1CVSS0.00339EPSS
Exploits0References1
CVE
CVE
added 2024/12/02 1:49 p.m.49 views

CVE-2024-52453

CVE-2024-52453 affects WordPress plugin Library Bookshelves (versions n/a through 5.8). The issue is a Reflected XSS due to improper input neutralization during web page generation. Impact per sources: potential for script execution in the context of the user. Remediation: upgrade to a version la...

7.1CVSS7.2AI score0.00339EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/02 1:49 p.m.61 views

CVE-2024-52453 WordPress Library Bookshelves plugin <= 5.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in photonicgnostic Library Bookshelves library-bookshelves allows Reflected XSS.This issue affects Library Bookshelves: from n/a through = 5.8...

7.1CVSS0.00339EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/02 1:49 p.m.12 views

CVE-2024-52453 WordPress Library Bookshelves plugin <= 5.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jon Lorang Library Bookshelves allows Reflected XSS.This issue affects Library Bookshelves: from n/a through 5.8...

7.1CVSS6.9AI score0.00339EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/12/02 12:0 a.m.7 views

PT-2024-35293 · Unknown · Jon Lorang Library Bookshelves

Name of the Vulnerable Software and Affected Versions: Jon Lorang Library Bookshelves versions n/a through 5.8 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This means that an...

7.1CVSS9.4AI score0.00339EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/12/02 12:0 a.m.5 views

WordPress plugin Library Bookshelves 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS7.5AI score0.00339EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/11/18 9:44 a.m.5 views

WordPress Library Bookshelves plugin <= 5.8 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Library Bookshelves versions = 5.8...

7.1CVSS6.1AI score0.00339EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/11/18 12:0 a.m.16 views

WordPress Library Bookshelves Plugin <= 5.8 is vulnerable to Cross Site Scripting (XSS)

Software Library Bookshelves Type Plugin Vulnerable versions = 5.8 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52453 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 893d1f48a420 Credits Mika Required privilege...

6.5AI score0.00339EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder