Lucene search
+L

76 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/30 12:00 a.m.•8 views

CVE-2024-1692: Improper Neutralization of Input During Web Page Generation

The BoldGrid Easy SEO – Simple and Effective SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the meta description field in all versions up to, and including, 1.6.13 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS6AI score0.00333EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/30 12:00 a.m.•23 views

WordPress Plugin BoldGrid Easy SEO 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

6.4CVSS7.6AI score0.00333EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2024/03/05 2:15 a.m.•22 views

CVE-2024-1769

The JM Twitter Cards plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 12 via the meta description data. This makes it possible for unauthenticated attackers to view password protected post content when viewing the page source...

5.3CVSS5.8AI score0.00611EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/05 12:00 a.m.•8 views

CVE-2024-1769: Exposure of Sensitive Information to an Unauthorized Actor

The JM Twitter Cards plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 14 via the meta description data. This makes it possible for unauthenticated attackers to view password protected post content when viewing the page source...

5.3CVSS5.7AI score0.00611EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
•added 2024/03/04 12:00 a.m.•22 views

JM Twitter Cards < 14.1.0 - Password Protected Post Access

Description The plugin is vulnerable to Information Exposure via the meta description data, allowing unauthenticated attackers to view password protected post content when viewing the page source...

5.3CVSS7AI score0.00611EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
•added 2023/10/23 12:00 a.m.•69 views

OpenSolution Quick CMS Cross-Site Scripting Vulnerability

OpenSolution Quick CMS is a free content management system organized by OpenSolution. A cross-site scripting vulnerability exists in OpenSolution Quick CMS v6.7, which stems from the lack of effective filtering and escaping of user-supplied data in the SEO - Meta description parameter of the Page...

5.4CVSS6.2AI score0.00644EPSS
SaveExploits1References1
NVD
NVD
•added 2023/10/19 10:15 p.m.•48 views

CVE-2023-43344

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description parameter in the Pages Menu component...

5.4CVSS5.5AI score0.00644EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/10/19 10:15 p.m.•14 views

CVE-2023-43344

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description parameter in the Pages Menu component...

5.4CVSS6.1AI score0.00644EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2023/10/19 10:15 p.m.•21 views

CVE-2023-43344

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description parameter in the Pages Menu component...

5.4CVSS6.1AI score0.00644EPSS
SaveExploits1References1
Prion
Prion
•added 2023/10/19 10:15 p.m.•30 views

Cross site scripting

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description parameter in the Pages Menu component...

4.9CVSS5.5AI score0.00644EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/10/19 12:00 a.m.•22 views

PT-2023-28793 · Opensolution · Opensolution Quick Cms

Name of the Vulnerable Software and Affected Versions: opensolution Quick CMS version 6.7 Description: A cross-site scripting XSS issue allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description parameter in the Pages Menu component. This enables the...

5.4CVSS6.4AI score0.00644EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2023/10/19 12:00 a.m.•55 views

CVE-2023-43344

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description parameter in the Pages Menu component...

5.7AI score0.00644EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/19 12:00 a.m.•5 views

CVE-2023-43344: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description parameter in the Pages Menu component...

5.4CVSS6.5AI score0.00644EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/10/19 12:00 a.m.•20 views

CVE-2023-43344

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description parameter in the Pages Menu component...

6.2AI score0.00644EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/10/19 12:00 a.m.•20 views

OpenSolution Quick CMS 跨站脚本漏洞

OpenSolution Quick CMS is a free content management system organized by OpenSolution. A cross-site scripting vulnerability exists in OpenSolution Quick CMS v6.7, which stems from the lack of effective filtering and escaping of user-supplied data in the SEO - Meta description parameter of the Page...

5.4CVSS6AI score0.00644EPSS
SaveExploits1References2
CVE
CVE
•added 2023/10/19 12:00 a.m.•64 views

CVE-2023-43344

CVE-2023-43344 concerns OpenSolution Quick CMS v6.7. The vulnerability is a Cross-Site Scripting (XSS) flaw in the SEO - Meta description field of the Pages Menu component, allowing a local attacker to execute arbitrary script via a crafted payload. Root cause reported across sources is insuffici...

5.4CVSS5.4AI score0.00644EPSS
SaveExploits1References1Affected Software1
osv_cve
osv_cve
•added 2023/07/03 9:15 p.m.•22 views

CVE-2020-22152

Cross Site Scripting vulnerability in daylight studio FUEL- CMS v.1.4.6 allows a remote attacker to execute arbitrary code via the page title, meta description and meta keywords of the pages function...

5.4CVSS7.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/07/03 12:00 a.m.•3 views

PT-2023-11610

Name of the Vulnerable Software and Affected Versions FUEL-CMS version 1.4.6 Description A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the page title, meta description, and meta keywords of the pages function. Recommendations For version 1.4.6, consider...

5.4CVSS0.00576EPSS
SaveExploits1References4
Mend
Mend
•added 2023/07/03 12:00 a.m.•5 views

CVE-2020-22152

Cross Site Scripting vulnerability in daylight studio FUEL- CMS v.1.4.6 allows a remote attacker to execute arbitrary code via the page title, meta description and meta keywords of the pages function...

5.4CVSS0.00576EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/03 12:00 a.m.•5 views

CVE-2020-22152: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in daylight studio FUEL- CMS v.1.4.6 allows a remote attacker to execute arbitrary code via the page title, meta description and meta keywords of the pages function...

5.4CVSS6.6AI score0.00576EPSS
SaveExploits1References2
Rows per page
Query Builder