Lucene search
+L

7902 matches found

CNNVD
CNNVD
added 2024/08/18 12:00 a.m.8 views

WordPress plugin GivingPress Lite 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site...

6.5CVSS6AI score0.00253EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/08/18 12:00 a.m.7 views

PT-2024-30520 · Unknown · Givingpress Lite

Name of the Vulnerable Software and Affected Versions: GivingPress Lite versions 1.8.6 and earlier Description: The issue is related to improper neutralization of input during web page generation, allowing Stored XSS. This means an attacker can inject malicious scripts into the website, potential...

6.5CVSS6.4AI score0.00253EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/08/18 12:00 a.m.11 views

PT-2024-30473 · WordPress · Wp-Lister Lite For Ebay

Name of the Vulnerable Software and Affected Versions: WP-Lister Lite for eBay versions 3.6.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For...

7.1CVSS6.4AI score0.00289EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/08/18 12:00 a.m.9 views

WordPress plugin Bold Timeline Lite 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6.1AI score0.00253EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/08/18 12:00 a.m.7 views

WordPress plugin WP-Lister Lite for eBay 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

7.1CVSS6AI score0.00289EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/08/16 2:19 p.m.8 views

WordPress GivingPress Lite theme <= 1.8.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Theme GivingPress Lite versions = 1.8.6...

6.5CVSS6.1AI score0.00253EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/08/16 11:29 a.m.9 views

WordPress Bold Timeline Lite plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Bold Timeline Lite versions = 1.2.0...

6.5CVSS6.1AI score0.00253EPSS
SaveExploits0Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2024/08/16 12:00 a.m.4 views

VulnCheck KEV: CVE-2024-43306

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Lab WP-Lister Lite for eBay wp-lister-for-ebay.This issue affects WP-Lister Lite for eBay: from n/a through = 3.6.0...

7.1CVSS5.8AI score0.00289EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/08/16 12:00 a.m.10 views

WordPress GivingPress Lite Theme <= 1.8.6 is vulnerable to Cross Site Scripting (XSS)

Software GivingPress Lite Type Theme Vulnerable versions = 1.8.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43352 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID dc2d25ba2424 Credits stealthcopter Required privilege...

6.5CVSS6.6AI score0.00253EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/08/16 12:00 a.m.12 views

WordPress WP-Lister Lite for eBay Plugin <= 3.6.0 is vulnerable to Cross Site Scripting (XSS)

Software WP-Lister Lite for eBay Type Plugin Vulnerable versions = 3.6.0 Fixed in 3.6.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43306 Patch priority Medium CVSS severity Medium 7.1 Developer WP Lab PSID d4c17ecc0795 Credits LVT-tholv2k Required privilege...

7.1CVSS6.6AI score0.00289EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/08/16 12:00 a.m.17 views

WordPress Bold Timeline Lite Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)

Software Bold Timeline Lite Type Plugin Vulnerable versions = 1.2.0 Fixed in 1.2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43294 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 636116c40c53 Credits LVT-tholv2k Required privilege...

6.5CVSS6.6AI score0.00253EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2024/08/13 11:15 a.m.21 views

CVE-2024-43128

Improper Control of Generation of Code 'Code Injection' vulnerability in WC Product Table WooCommerce Product Table Lite allows Code Injection.This issue affects WooCommerce Product Table Lite: from n/a through 3.5.1...

7.3CVSS0.00282EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/13 11:15 a.m.9 views

CVE-2024-43128

Improper Control of Generation of Code 'Code Injection' vulnerability in WC Product Table WooCommerce Product Table Lite allows Code Injection.This issue affects WooCommerce Product Table Lite: from n/a through 3.5.1...

7.3CVSS5.8AI score0.00282EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/13 10:52 a.m.37 views

CVE-2024-43128 WordPress WooCommerce Product Table Lite plugin <= 3.5.1 - Arbitrary Code Execution vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in WC Product Table WooCommerce Product Table Lite allows Code Injection.This issue affects WooCommerce Product Table Lite: from n/a through 3.5.1...

6.5CVSS0.00282EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/13 10:52 a.m.17 views

CVE-2024-43128 WordPress WooCommerce Product Table Lite plugin <= 3.5.1 - Arbitrary Code Execution vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in WC Product Table WooCommerce Product Table Lite allows Code Injection.This issue affects WooCommerce Product Table Lite: from n/a through 3.5.1...

6.5CVSS7.1AI score0.00282EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/13 10:52 a.m.67 views

CVE-2024-43128

CVE-2024-43128 in WooCommerce Product Table Lite (WC Product Table Lite) is an improper generation of code vulnerability. Affected versions are WC Product Table Lite from 0 through 3.5.1, with an unauthenticated code/shortcode execution path. The issue is resolved by upgrading to version 3.5.1 (t...

7.3CVSS7.1AI score0.00282EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/08/13 12:00 a.m.12 views

WordPress plugin WooCommerce Product Table Lite 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

7.3CVSS7.3AI score0.00282EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/08/12 11:15 p.m.8 views

CVE-2024-43147

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Merkulove Selection Lite allows Stored XSS.This issue affects Selection Lite: from n/a through 1.11...

6.5CVSS5.2AI score0.00259EPSS
SaveExploits0References2
NVD
NVD
added 2024/08/12 11:15 p.m.44 views

CVE-2024-43147

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Merkulove Selection Lite allows Stored XSS.This issue affects Selection Lite: from n/a through 1.11...

6.5CVSS0.00259EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/12 10:17 p.m.18 views

CVE-2024-43147 WordPress Selection Lite plugin <= 1.11 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Merkulove Selection Lite allows Stored XSS.This issue affects Selection Lite: from n/a through 1.11...

6.5CVSS6.8AI score0.00259EPSS
SaveExploits0References1
Rows per page
Query Builder