Lucene search
+L

5182 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/05 12:00 a.m.•10 views

CVE-2023-43343: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Files - Description parameter in the Pages Menu component...

5.4CVSS6.6AI score0.00689EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2023/10/04 10:15 p.m.•26 views

CVE-2023-43877

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a payload crafted in the Home Page fields in the Administration menu...

5.4CVSS6.5AI score0.00546EPSS
SaveExploits2References3
Prion
Prion
•added 2023/10/04 10:15 p.m.•36 views

Cross site scripting

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a payload crafted in the Home Page fields in the Administration menu...

4.3CVSS5.3AI score0.00546EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
•added 2023/10/04 12:00 a.m.•40 views

CVE-2023-43877

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a payload crafted in the Home Page fields in the Administration menu...

5.7AI score0.00546EPSS
SaveExploits2References2
osv_cve
osv_cve
•added 2023/10/04 12:00 a.m.•24 views

CVE-2023-43877

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a payload crafted in the Home Page fields in the Administration menu...

5.7AI score
SaveExploits0References4
CVE
CVE
•added 2023/10/04 12:00 a.m.•76 views

CVE-2023-43877

CVE-2023-43877 concerns Rite CMS 3.0, where multiple Cross-Site Scripting (XSS) vulnerabilities allow an attacker to execute arbitrary code by crafting payloads in the Home Page field of the Administration menu (also referenced for related CVE-2023-43878). The Red Hat entry notes a similar issue ...

4.8CVSS6.5AI score0.00546EPSS
SaveExploits2References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/04 12:00 a.m.•15 views

CVE-2023-43877

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a payload crafted in the Home Page fields in the Administration menu...

6.5AI score0.00546EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/04 12:00 a.m.•9 views

CVE-2023-43877: Improper Neutralization of Input During Web Page Generation

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a payload crafted in the Home Page fields in the Administration menu...

4.8CVSS6.3AI score0.00546EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2023/10/04 12:00 a.m.•8 views

PT-2023-29022

Name of the Vulnerable Software and Affected Versions Rite CMS version 3.0 Description The issue allows attackers to execute arbitrary code via a payload crafted in the Home Page fields in the Administration menu. This is a result of multiple Cross-Site scripting XSS vulnerabilities...

4.8CVSS6.5AI score0.00546EPSS
SaveExploits2References7
NVD
NVD
•added 2023/10/02 9:15 a.m.•37 views

CVE-2023-44479

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Jim Krill WP Jump Menu plugin = 3.6.4 versions...

5.9CVSS5.4AI score0.00392EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/10/02 8:13 a.m.•40 views

CVE-2023-44479 WordPress WP Jump Menu Plugin <= 3.6.4 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Jim Krill WP Jump Menu plugin = 3.6.4 versions...

5.9CVSS5.5AI score0.00392EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/10/02 8:13 a.m.•16 views

CVE-2023-44479 WordPress WP Jump Menu Plugin <= 3.6.4 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Jim Krill WP Jump Menu plugin = 3.6.4 versions...

5.9CVSS6.3AI score0.00392EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/02 8:13 a.m.•100 views

CVE-2023-44479

CVE-2023-44479 concerns the WP Jump Menu WordPress plugin by Jim Krill. Affected versions are

5.9CVSS6.3AI score0.00392EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/02 12:00 a.m.•5 views

CVE-2023-44479: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Jim Krill WP Jump Menu plugin = 3.6.4 versions...

5.9CVSS6.4AI score0.00392EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/10/02 12:00 a.m.•24 views

WordPress Plugin wp-jump-menu Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6.1AI score0.00392EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2023/09/30 9:15 p.m.•27 views

CVE-2023-43713

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability, which allows attackers to inject JS via the "title" parameter, in the "/admin/admin-menu/add-submit" endpoint, which can lead to unauthorized execution of scripts in a user's web browser...

5.4CVSS5.9AI score0.00455EPSS
SaveExploits1References2
NVD
NVD
•added 2023/09/30 9:15 p.m.•24 views

CVE-2023-43713

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability, which allows attackers to inject JS via the "title" parameter, in the "/admin/admin-menu/add-submit" endpoint, which can lead to unauthorized execution of scripts in a user's web browser...

5.4CVSS5.3AI score0.00455EPSS
SaveExploits1References2
Prion
Prion
•added 2023/09/30 9:15 p.m.•28 views

Cross site scripting

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability, which allows attackers to inject JS via the "title" parameter, in the "/admin/admin-menu/add-submit" endpoint, which can lead to unauthorized execution of scripts in a user's web browser...

4.9CVSS5.3AI score0.00455EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2023/09/30 8:53 p.m.•81 views

CVE-2023-43713

Os Commerce CVE-2023-43713 describes a Cross-Site Scripting (XSS) vulnerability that can be triggered via the title parameter in the /admin/admin-menu/add-submit endpoint. The issue is listed as a reflected XSS (per CVE list data) with a medium CVSS3.1 base score (5.4). Affected product/version d...

5.4CVSS5.9AI score0.00455EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/30 12:00 a.m.•9 views

CVE-2023-43713: Improper Neutralization of Input During Web Page Generation

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability, which allows attackers to inject JS via the "title" parameter, in the "/admin/admin-menu/add-submit" endpoint, which can lead to unauthorized execution of scripts in a user's web browser...

5.4CVSS6AI score0.00455EPSS
SaveExploits1References3
Rows per page
Query Builder