Lucene search
+L

9 matches found

RedhatCVE
RedhatCVE
•added 2025/11/05 3:07 p.m.•19 views

CVE-2025-12184

The MeetingList plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 0.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and...

4.4CVSS5AI score0.00192EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/04 3:15 p.m.•16 views

CVE-2025-12184

The MeetingList plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 0.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and...

4.4CVSS0.00192EPSS
SaveExploits0References2
CVE
CVE
•added 2025/11/04 2:25 p.m.•38 views

CVE-2025-12184

CVE-2025-12184 affects the WordPress MeetingList plugin (versions up to and including 0.11). The vulnerability is a Stored Cross-Site Scripting flaw in admin/settings handling, caused by insufficient input sanitization and output escaping. Exploitation requires authenticated access with Administr...

4.4CVSS4.7AI score0.00192EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/11/04 2:25 p.m.•18 views

EUVD-2025-37761

The MeetingList plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 0.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and...

4.4CVSS4.6AI score0.00192EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/11/04 2:25 p.m.•14 views

CVE-2025-12184 MeetingList <= 0.11 - Authenticated (Admin+) Stored Cross-Site Scripting

The MeetingList plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 0.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and...

4.4CVSS4.7AI score0.00192EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/11/04 4:55 a.m.•18 views

WordPress MeetingList plugin <= 0.11 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by Ivan Cese in WordPress Plugin MeetingList versions = 0.11...

4.4CVSS5.7AI score0.00192EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/11/04 12:00 a.m.•18 views

WordPress plugin MeetingList 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

4.4CVSS5.8AI score0.00192EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/11/04 12:00 a.m.•22 views

PT-2025-45012

Name of the Vulnerable Software and Affected Versions MeetingList plugin for WordPress versions prior to 0.11 Description The software is susceptible to Stored Cross-Site Scripting through admin settings due to inadequate input sanitization and output escaping. This allows authenticated attackers...

4.4CVSS5.4AI score0.00192EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/04 12:00 a.m.•2 views

CVE-2025-12184: Improper Neutralization of Input During Web Page Generation

The MeetingList plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 0.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and...

4.4CVSS5.9AI score0.00192EPSS
SaveExploits0References1
Rows per page
Query Builder