Lucene search
+L

4495 matches found

CNNVD
CNNVD
•added 2025/01/24 12:00 a.m.•20 views

WordPress plugin Magic the Gathering Card Tooltips 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPres...

6.5CVSS8AI score0.00368EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/24 12:00 a.m.•5 views

CVE-2025-24704: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in grimdonkey Magic the Gathering Card Tooltips magic-the-gathering-card-tooltips allows Stored XSS.This issue affects Magic the Gathering Card Tooltips: from n/a through = 3.4.0...

6.5CVSS5.8AI score0.00368EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2025/01/23 2:55 p.m.•27 views

Custom Backdoor Exploiting Magic Packet Vulnerability in Juniper Routers

Enterprise-grade Juniper Networks routers have become the target of a custom backdoor as part of a campaign dubbed J-magic. According to the Black Lotus Labs team at Lumen Technologies, the activity is so named for the fact that the backdoor continuously monitors for a "magic packet" sent by the...

7.1AI score
SaveExploits0
NVD
NVD
•added 2025/01/16 9:15 p.m.•34 views

CVE-2025-23935

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fengler Magic Google Maps magic-google-maps allows Stored XSS.This issue affects Magic Google Maps: from n/a through = 1.0.4...

6.5CVSS0.00227EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/16 9:15 p.m.•10 views

CVE-2025-23827

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in straps Strx Magic Floating Sidebar Maker strx-magic-floating-sidebar-maker allows Stored XSS.This issue affects Strx Magic Floating Sidebar Maker: from n/a through = 1.4.1...

7.1CVSS0.00411EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/16 8:07 p.m.•81 views

CVE-2025-23935

CVE-2025-23935 is a Cross-Site Scripting vulnerability in the WordPress plugin package Magic Google Maps. The connected Wordfence entry confirms an authenticated Stored XSS via input during web page generation in Magic Google Maps versions up to and including 1.0.4, caused by improper neutralizat...

6.5CVSS7.2AI score0.00227EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/16 8:07 p.m.•41 views

CVE-2025-23935 WordPress Magic Google Maps plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fengler Magic Google Maps magic-google-maps allows Stored XSS.This issue affects Magic Google Maps: from n/a through = 1.0.4...

6.5CVSS0.00227EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/16 8:07 p.m.•18 views

CVE-2025-23935 WordPress Magic Google Maps plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fengler Magic Google Maps magic-google-maps allows Stored XSS.This issue affects Magic Google Maps: from n/a through = 1.0.4...

6.5CVSS7.2AI score0.00227EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/16 8:07 p.m.•9 views

CVE-2025-23827 WordPress Strx Magic Floating Sidebar Maker plugin <= 1.4.1 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in straps Strx Magic Floating Sidebar Maker strx-magic-floating-sidebar-maker allows Stored XSS.This issue affects Strx Magic Floating Sidebar Maker: from n/a through = 1.4.1...

7.1CVSS7.2AI score0.00411EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/16 8:07 p.m.•28 views

CVE-2025-23827 WordPress Strx Magic Floating Sidebar Maker plugin <= 1.4.1 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in straps Strx Magic Floating Sidebar Maker strx-magic-floating-sidebar-maker allows Stored XSS.This issue affects Strx Magic Floating Sidebar Maker: from n/a through = 1.4.1...

7.1CVSS0.00411EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/16 8:07 p.m.•61 views

CVE-2025-23827

CVE-2025-23827 affects Strx Magic Floating Sidebar Maker (WordPress plugin). Description: Stored XSS due to improper neutralization of input during web page generation. Impact: stored Cross-Site Scripting via vulnerable input; affects Strx Magic Floating Sidebar Maker versions from n/a up to and ...

7.1CVSS7.2AI score0.00411EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/16 6:43 p.m.•14 views

WordPress Magic Google Maps plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Magic Google Maps versions = 1.0.4...

6.5CVSS6.1AI score0.00227EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/01/16 6:42 p.m.•12 views

WordPress Strx Magic Floating Sidebar Maker plugin <= 1.4.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin Strx Magic Floating Sidebar Maker versions = 1.4.1...

7.1CVSS6.2AI score0.00411EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2025/01/16 12:00 a.m.•12 views

WordPress plugin Strx Magic Floating Sidebar Maker 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS7.7AI score0.00411EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/16 12:00 a.m.•18 views

WordPress plugin Magic Google Maps 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.7AI score0.00227EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/01/16 12:00 a.m.•4 views

PT-2025-5125

Name of the Vulnerable Software and Affected Versions Strx Magic Floating Sidebar Maker versions 1.4.1 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an attacker can...

7.1CVSS0.00411EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/01/16 12:00 a.m.•5 views

PT-2025-5214

Name of the Vulnerable Software and Affected Versions Magic Google Maps versions 1.0.4 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in the Magic Google Maps plugin...

6.5CVSS0.00227EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/16 12:00 a.m.•5 views

CVE-2025-23827: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in straps Strx Magic Floating Sidebar Maker strx-magic-floating-sidebar-maker allows Stored XSS.This issue affects Strx Magic Floating Sidebar Maker: from n/a through = 1.4.1...

7.1CVSS5.8AI score0.00411EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/16 12:00 a.m.•6 views

CVE-2025-23935: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fengler Magic Google Maps magic-google-maps allows Stored XSS.This issue affects Magic Google Maps: from n/a through = 1.0.4...

6.5CVSS5.8AI score0.00227EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/31 1:15 p.m.•31 views

CVE-2024-56205

Incorrect Privilege Assignment vulnerability in SunnyKai AI Magic newsletter-page-redirects allows Privilege Escalation.This issue affects AI Magic: from n/a through = 1.0.4...

9.8CVSS0.0064EPSS
SaveExploits0References1
Rows per page
Query Builder