Lucene search
+L

154 matches found

Patchstack
Patchstack
•added 2023/06/23 12:00 a.m.•29 views

WordPress MaxButtons Plugin <= 9.5.3 is vulnerable to Cross Site Scripting (XSS)

Software MaxButtons Type Plugin Vulnerable versions = 9.5.3 Fixed in 9.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-36503 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 24d386e76da8 Credits Rafshanzani Suhada Required...

6.5CVSS5.8AI score0.00383EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2023/03/05 9:15 p.m.•44 views

CVE-2014-125092

A vulnerability was found in MaxButtons Plugin up to 1.26.0 on WordPress and classified as problematic. This issue affects the function maxbuttonsstrippx of the file includes/maxbuttons-button.php. The manipulation of the argument buttonid leads to cross site scripting. The attack may be initiate...

6.1CVSS4.5AI score0.00531EPSS
SaveExploits0References4
Prion
Prion
•added 2023/03/05 9:15 p.m.•31 views

Cross site scripting

A vulnerability was found in MaxButtons Plugin up to 1.26.0 on WordPress and classified as problematic. This issue affects the function maxbuttonsstrippx of the file includes/maxbuttons-button.php. The manipulation of the argument buttonid leads to cross site scripting. The attack may be initiate...

5.8CVSS6.5AI score0.00531EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2023/03/05 8:31 p.m.•45 views

CVE-2014-125092 MaxButtons Plugin maxbuttons-button.php maxbuttons_strip_px cross site scripting

A vulnerability was found in MaxButtons Plugin up to 1.26.0 on WordPress and classified as problematic. This issue affects the function maxbuttonsstrippx of the file includes/maxbuttons-button.php. The manipulation of the argument buttonid leads to cross site scripting. The attack may be initiate...

4CVSS6AI score0.00531EPSS
SaveExploits0References4
CVE
CVE
•added 2023/03/05 8:31 p.m.•96 views

CVE-2014-125092

CVE-2014-125092 affects the WordPress MaxButtons Plugin up to version 1.26.0. The vulnerability targets the function maxbuttons_strip_px in includes/maxbuttons-button.php, where manipulation of the button_id parameter leads to a cross-site scripting (XSS) flaw. The issue may be triggered remotely...

6.1CVSS4.8AI score0.00531EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2023/03/05 12:00 a.m.•14 views

PT-2023-10160 · WordPress · Maxbuttons Plugin

Name of the Vulnerable Software and Affected Versions: MaxButtons Plugin versions up to 1.26.0 Description: A vulnerability was found in the MaxButtons Plugin and classified as problematic. This issue affects the function maxbuttons strip px of the file includes/maxbuttons-button.php. The...

6.1CVSS4.2AI score0.00531EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2023/03/05 12:00 a.m.•20 views

WordPress Plugin MaxButtons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.1CVSS4.2AI score0.00531EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/05 12:00 a.m.•2 views

CVE-2014-125092: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in MaxButtons Plugin up to 1.26.0 on WordPress and classified as problematic. This issue affects the function maxbuttonsstrippx of the file includes/maxbuttons-button.php. The manipulation of the argument buttonid leads to cross site scripting. The attack may be initiate...

6.1CVSS3.8AI score0.00531EPSS
SaveExploits0References2
CNVD
CNVD
•added 2022/09/28 12:00 a.m.•93 views

WordPress MaxButtons Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

4.8CVSS5.1AI score0.0051EPSS
SaveExploits0References1
OSV
OSV
•added 2022/09/23 2:15 p.m.•16 views

CVE-2022-38703

Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability in Max Foundry Button Plugin MaxButtons plugin = 9.2 at WordPress...

4.8CVSS5.8AI score0.0051EPSS
SaveExploits0References2
NVD
NVD
•added 2022/09/23 2:15 p.m.•45 views

CVE-2022-38703

Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability in Max Foundry Button Plugin MaxButtons plugin = 9.2 at WordPress...

4.8CVSS0.0051EPSS
SaveExploits0References2
CVE
CVE
•added 2022/09/23 1:52 p.m.•85 views

CVE-2022-38703

The CVE-2022-38703 entry concerns the WordPress MaxButtons plugin (MaxButtons) versions

4.8CVSS4.2AI score0.0051EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/09/23 1:52 p.m.•61 views

CVE-2022-38703 WordPress Button Plugin MaxButtons plugin <= 9.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability in Max Foundry Button Plugin MaxButtons plugin = 9.2 at WordPress...

3.4CVSS5.5AI score0.0051EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/09/23 12:00 a.m.•39 views

WordPress plugin Max Button 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

4.8CVSS6.2AI score0.0051EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/09/23 12:00 a.m.•8 views

PT-2022-24537 · WordPress · Maxbuttons

Name of the Vulnerable Software and Affected Versions: MaxButtons plugin versions = 9.2 Description: The issue is an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin or higher privileges can inject malicious scripts into the application, which ca...

4.8CVSS4.7AI score0.0051EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/23 12:00 a.m.•5 views

CVE-2022-38703: Improper Neutralization of Input During Web Page Generation

Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability in Max Foundry Button Plugin MaxButtons plugin = 9.2 at WordPress...

4.8CVSS5.6AI score0.0051EPSS
SaveExploits0References2
OSV
OSV
•added 2022/08/22 3:15 p.m.•13 views

CVE-2022-36346

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Max Foundry MaxButtons plugin = 9.2 at WordPress...

8.8CVSS5.8AI score0.00404EPSS
SaveExploits0References2
NVD
NVD
•added 2022/08/22 3:15 p.m.•36 views

CVE-2022-36346

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Max Foundry MaxButtons plugin = 9.2 at WordPress...

8.8CVSS0.00404EPSS
SaveExploits0References2
Prion
Prion
•added 2022/08/22 3:15 p.m.•34 views

Cross site request forgery (csrf)

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Max Foundry MaxButtons plugin = 9.2 at WordPress...

6.8CVSS8.9AI score0.00404EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2022/08/22 2:50 p.m.•118 views

CVE-2022-36346

CVE-2022-36346 affects the WordPress MaxButtons plugin by Max Foundry, specifically versions

8.8CVSS6.9AI score0.00404EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder