Lucene search
+L

851 matches found

Prion
Prion
•added 2023/05/16 3:15 a.m.•25 views

Cross site scripting

The video carousel slider with lightbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the searchterm parameter in versions up to, and including, 1.0.22 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

5.8CVSS6AI score0.00607EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/16 12:00 a.m.•3 views

CVE-2023-2710: Improper Neutralization of Input During Web Page Generation

The video carousel slider with lightbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the searchterm parameter in versions up to, and including, 1.0.22 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

6.1CVSS8.2AI score0.00607EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/05/16 12:00 a.m.•18 views

WordPress plugin video carousel slider with lightbox 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.1CVSS7AI score0.00607EPSS
SaveExploits0References4
WPVulnDB
WPVulnDB
•added 2023/05/15 12:00 a.m.•17 views

video carousel slider with lightbox < 1.0.23 - Reflected XSS

The plugin does not sanitise and escape the searchterm parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS6AI score0.00607EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2023/05/15 12:00 a.m.•24 views

WordPress video carousel slider with lightbox Plugin <= 1.0.22 is vulnerable to Cross Site Scripting (XSS)

Software video carousel slider with lightbox Type Plugin Vulnerable versions = 1.0.22 Fixed in 1.0.23 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32797 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 914412fc8def...

7.1CVSS5.7AI score0.00353EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2023/05/10 12:00 a.m.•20 views

WordPress Team Circle Image Slider With Lightbox Plugin <= 1.0.17 is vulnerable to Cross Site Scripting (XSS)

Software Team Circle Image Slider With Lightbox Type Plugin Vulnerable versions = 1.0.17 Fixed in 1.0.18 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-2604 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 4f6a23b77029 Credi...

6.1CVSS5.6AI score0.00433EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2023/04/07 3:15 p.m.•10 views

CVE-2023-28792

Unauth. Reflected Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution Continuous Image Carousel With Lightbox plugin = 1.0.15 versions...

6.1CVSS6.8AI score0.00382EPSS
SaveExploits0References1
NVD
NVD
•added 2023/04/07 3:15 p.m.•29 views

CVE-2023-28792

Unauth. Reflected Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution Continuous Image Carousel With Lightbox plugin = 1.0.15 versions...

7.1CVSS6.2AI score0.00382EPSS
SaveExploits0References1
Prion
Prion
•added 2023/04/07 3:15 p.m.•29 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution Continuous Image Carousel With Lightbox plugin = 1.0.15 versions...

5.8CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/04/07 2:00 p.m.•95 views

CVE-2023-28792

CVE-2023-28792 affects the WordPress plugin Continuous Image Carousel With Lightbox (WordPress plugin)

7.1CVSS6.1AI score0.00382EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/04/07 12:00 a.m.•18 views

WordPress plugin Continuous Image Carousel With Lightbox 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS6.9AI score0.00382EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/07 12:00 a.m.•4 views

CVE-2023-28792: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution Continuous Image Carousel With Lightbox plugin = 1.0.15 versions...

7.1CVSS8.2AI score0.00382EPSS
SaveExploits0References2
OSV
OSV
•added 2023/04/06 9:15 a.m.•18 views

CVE-2023-24004

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPdevart Image and Video Lightbox, Image PopUp plugin = 2.1.5 versions...

4.8CVSS5.8AI score0.00392EPSS
SaveExploits0References1
CVE
CVE
•added 2023/04/06 8:00 a.m.•78 views

CVE-2023-24004

The CVE-2023-24004 entry concerns a Stored XSS in the WordPress plugin WPdevart Image and Video Lightbox, Image PopUp, affecting versions

5.9CVSS4.9AI score0.00392EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/04/06 8:00 a.m.•14 views

CVE-2023-24004 WordPress Image and Video Lightbox, Image PopUp Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPdevart Image and Video Lightbox, Image PopUp plugin = 2.1.5 versions...

5.9CVSS5.4AI score0.00392EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/06 12:00 a.m.•5 views

CVE-2023-24004: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPdevart Image and Video Lightbox, Image PopUp plugin = 2.1.5 versions...

5.9CVSS5.8AI score0.00392EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/04/06 12:00 a.m.•18 views

WordPress Plugin Image and Video Lightbox, Image PopUp 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

5.9CVSS5AI score0.00392EPSS
SaveExploits0References2
OSV
OSV
•added 2023/03/28 8:15 a.m.•16 views

CVE-2022-45831

Unauth. Reflected Cross-Site Scripting XSS vulnerability in biplob018 Image Hover Effects for Elementor with Lightbox and Flipbox plugin = 2.8 versions...

6.1CVSS5.8AI score0.00408EPSS
SaveExploits0References1
CVE
CVE
•added 2023/03/28 7:15 a.m.•60 views

CVE-2022-45831

CVE-2022-45831 affects the WordPress plugin Image Hover Effects – Caption Hover with Carousel (biplob018 Image Hover Effects for Elementor With Lightbox and Flipbox) versions

7.1CVSS6AI score0.00408EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/28 12:00 a.m.•4 views

CVE-2022-45831: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in biplob018 Image Hover Effects for Elementor with Lightbox and Flipbox plugin = 2.8 versions...

7.1CVSS7.8AI score0.00408EPSS
SaveExploits0References2
Rows per page
Query Builder