Lucene search
+L

143 matches found

Positive Technologies
Positive Technologies
•added 2024/12/13 12:00 a.m.•21 views

PT-2024-12864 · Mailmunch · Mailchimp Forms By Mailmunch

Name of the Vulnerable Software and Affected Versions: MailChimp Forms by MailMunch versions prior to 3.1.4 Description: The issue is related to a missing authorization vulnerability in MailChimp Forms by MailMunch, which allows the exploitation of incorrectly configured access control security...

8.8CVSS9.4AI score0.00706EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•3 views

CVE-2023-40203: Missing Authorization

Missing Authorization vulnerability in MailMunch MailChimp Forms by MailMunch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MailChimp Forms by MailMunch: from n/a through 3.1.4...

8.8CVSS8.3AI score0.00706EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/22 6:15 a.m.•39 views

CVE-2024-8735

The MailMunch – Grow your Email List plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 3.1.8. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS0.00493EPSS
SaveExploits0References3
OSV
OSV
•added 2024/11/22 6:15 a.m.•24 views

CVE-2024-8735

The MailMunch – Grow your Email List plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 3.1.8. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS7.4AI score0.00493EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/11/22 5:33 a.m.•33 views

CVE-2024-8735 MailMunch – Grow your Email List <= 3.1.8 - Reflected Cross-Site Scripting

The MailMunch – Grow your Email List plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 3.1.8. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS0.00493EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/11/22 5:33 a.m.•20 views

CVE-2024-8735 MailMunch – Grow your Email List <= 3.1.8 - Reflected Cross-Site Scripting

The MailMunch – Grow your Email List plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 3.1.8. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS6.3AI score0.00493EPSS
SaveExploits0References3
CVE
CVE
•added 2024/11/22 5:33 a.m.•72 views

CVE-2024-8735

CVE-2024-8735 – MailMunch – Grow your Email List (WordPress) is a reflected cross-site scripting vulnerability in the MailMunch plugin for WordPress, arising from the use of add_query_arg without proper escaping. It affects all versions up to and including 3.1.8. The flaw permits unauthenticated ...

6.1CVSS6AI score0.00493EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
•added 2024/11/22 12:00 a.m.•24 views

WordPress plugin MailMunch 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin...

6.1CVSS7.6AI score0.00493EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/22 12:00 a.m.•2 views

CVE-2024-8735: Improper Neutralization of Input During Web Page Generation

The MailMunch – Grow your Email List plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 3.1.8. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS6AI score0.00493EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/11/21 10:09 p.m.•19 views

WordPress MailMunch – Grow your Email List plugin <= 3.1.8 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin MailMunch – Grow your Email List versions = 3.1.8...

6.1CVSS6.3AI score0.00493EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/11/21 12:00 a.m.•25 views

WordPress MailMunch – Grow your Email List Plugin <= 3.1.8 is vulnerable to Cross Site Scripting (XSS)

Software MailMunch – Grow your Email List Type Plugin Vulnerable versions = 3.1.8 Fixed in 3.2.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8735 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5f0fbbdecd42 Credits...

6.1CVSS5.6AI score0.00493EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2024/11/21 12:00 a.m.•17 views

PT-2024-39213 · WordPress · Mailmunch

Name of the Vulnerable Software and Affected Versions: The MailMunch – Grow your Email List plugin for WordPress versions up to, and including, 3.1.8 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg without appropriate escaping on the URL. This...

6.1CVSS8.7AI score0.00493EPSS
SaveExploits0References7
NVD
NVD
•added 2024/11/20 7:15 a.m.•33 views

CVE-2024-8726

The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 3.2.3. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS0.00317EPSS
SaveExploits0References2
OSV
OSV
•added 2024/11/20 7:15 a.m.•21 views

CVE-2024-8726

The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 3.2.3. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS7.5AI score0.00317EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/11/20 6:42 a.m.•31 views

CVE-2024-8726 MailChimp Forms by MailMunch <= 3.2.3 - Reflected Cross-Site Scripting

The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 3.2.3. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS0.00317EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/11/20 6:42 a.m.•28 views

CVE-2024-8726 MailChimp Forms by MailMunch <= 3.2.3 - Reflected Cross-Site Scripting

The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 3.2.3. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS6.4AI score0.00317EPSS
SaveExploits0References2
CVE
CVE
•added 2024/11/20 6:42 a.m.•67 views

CVE-2024-8726

CVE-2024-8726 : MailChimp Forms by MailMunch (WordPress) is vulnerable to Reflected Cross-Site Scripting due to improper escaping in URLs via add_query_arg in all versions up to and including 3.2.3. Unauthenticated attackers can inject scripts in pages that a user might trigger by clicking links,...

6.1CVSS6.4AI score0.00317EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/20 12:00 a.m.•7 views

CVE-2024-8726: Improper Neutralization of Input During Web Page Generation

The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 3.2.3. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS6AI score0.00317EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/20 12:00 a.m.•18 views

WordPress plugin MailChimp Forms by MailMunch 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS7.6AI score0.00317EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/11/19 8:05 p.m.•17 views

WordPress MailChimp Forms by MailMunch plugin <= 3.2.3 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin MailChimp Forms by MailMunch versions = 3.2.3...

6.1CVSS6.3AI score0.00317EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder