Lucene search
+L

284 matches found

CVE
CVE
added 2023/11/18 10:24 p.m.81 views

CVE-2023-32514

CVE-2023-32514 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Google Site Verification plugin using Meta Tag. The vulnerability affects versions up to 1.2 and requires unauthenticated access. Public documentation in Patchstack indicates the vulnerability exists for

8.8CVSS8.5AI score0.00282EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/11/18 12:00 a.m.11 views

WordPress Plugin Google Site Verification plugin using Meta Tag Cross Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Google Site...

8.8CVSS8.6AI score0.00282EPSS
SaveExploits0References2
OSV
OSV
added 2023/10/04 12:15 p.m.10 views

CVE-2023-4090

Cross-site Scripting XSS reflected vulnerability on WideStand until 5.3.5 version, which generates one of the meta tags directly using the content of the queried URL, which would allow an attacker to inject HTML/Javascript code into the response...

6.1CVSS5.8AI score0.00309EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/10/04 12:00 a.m.9 views

WideStand CMS Cross-Site Scripting Vulnerability

WideStand CMS is a content management system from WideStand, Inc. A cross-site scripting vulnerability exists in WideStand CMS versions prior to 5.3.5 that stems from the direct use of the query's URL content to generate one of the meta tags, which would allow an attacker to inject HTML/Javascrip...

6.1CVSS6.3AI score0.00309EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/09/28 12:00 a.m.9 views

e017 CMS Cross-Site Scripting Vulnerability

e017 CMS is a content management system by e017. A cross-site scripting vulnerability exists in e017 CMS version v.2.3.2. An attacker can exploit this vulnerability by executing arbitrary code in the Copyright and Author fields of the Meta & Custom Tags Menu via specially crafted scripts...

5.4CVSS6.6AI score0.00628EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2023/09/16 12:15 a.m.7 views

CVE-2023-41436

Cross Site Scripting vulnerability in CSZCMS v.1.3.0 allows a local attacker to execute arbitrary code via a crafted script to the Additional Meta Tag parameter in the Pages Content Menu component...

5.4CVSS6.5AI score0.00473EPSS
SaveExploits1References2
OSV
OSV
added 2023/09/16 12:15 a.m.13 views

CVE-2023-41436

Cross Site Scripting vulnerability in CSZCMS v.1.3.0 allows a local attacker to execute arbitrary code via a crafted script to the Additional Meta Tag parameter in the Pages Content Menu component...

5.4CVSS6.1AI score0.00473EPSS
SaveExploits1References1
NVD
NVD
added 2023/09/16 12:15 a.m.25 views

CVE-2023-41436

Cross Site Scripting vulnerability in CSZCMS v.1.3.0 allows a local attacker to execute arbitrary code via a crafted script to the Additional Meta Tag parameter in the Pages Content Menu component...

5.4CVSS5.7AI score0.00473EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/09/15 12:00 a.m.10 views

CSZCMS Cross-Site Scripting Vulnerability

CSZCMS is an open source web application that allows managing all content and settings on a website. A security vulnerability exists in CSZCMS version v.1.3.0, which originates from a cross-site scripting vulnerability in the Additional Meta Tag parameter of the Pages Content Menu component...

5.4CVSS6.1AI score0.00473EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2023/09/15 12:00 a.m.12 views

CVE-2023-41436

Cross Site Scripting vulnerability in CSZCMS v.1.3.0 allows a local attacker to execute arbitrary code via a crafted script to the Additional Meta Tag parameter in the Pages Content Menu component...

6.9AI score0.00473EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2023/09/15 12:00 a.m.33 views

CVE-2023-41436

Cross Site Scripting vulnerability in CSZCMS v.1.3.0 allows a local attacker to execute arbitrary code via a crafted script to the Additional Meta Tag parameter in the Pages Content Menu component...

5.9AI score0.00473EPSS
SaveExploits1References1
Patchstack
Patchstack
added 2023/07/19 12:00 a.m.13 views

WordPress Meta Tag Manager Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Meta Tag Manager Type Plugin Vulnerable versions = 2.0.2 Fixed in 2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID b76d2247c311 Credits Rafie Muhammad Patchstack Required...

6.1AI score0.00272EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2023/05/09 12:00 a.m.16 views

WordPress Google Site Verification plugin using Meta Tag Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Google Site Verification plugin using Meta Tag Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-32514 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 2073ee5e63ae...

8.8CVSS6.7AI score0.00282EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/05/03 4:15 p.m.9 views

CVE-2023-23875

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Himanshu Bing Site Verification plugin using Meta Tag plugin = 1.0 versions...

4.8CVSS6.6AI score0.00369EPSS
SaveExploits0References1
NVD
NVD
added 2023/05/03 4:15 p.m.35 views

CVE-2023-23875

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Himanshu Bing Site Verification plugin using Meta Tag plugin = 1.0 versions...

5.9CVSS5.4AI score0.00369EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/03 4:15 p.m.16 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Himanshu Bing Site Verification plugin using Meta Tag plugin = 1.0 versions...

4.3CVSS4.8AI score0.00369EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/05/03 3:10 p.m.53 views

CVE-2023-23875

CVE-2023-23875 describes an authentication-required Stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin combination “Bing Site Verification plugin using Meta Tag” (v

5.9CVSS4.9AI score0.00369EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/05/03 3:10 p.m.34 views

CVE-2023-23875 WordPress Bing Site Verification plugin using Meta Tag Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Himanshu Bing Site Verification plugin using Meta Tag plugin = 1.0 versions...

5.9CVSS5.5AI score0.00369EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/05/03 12:00 a.m.12 views

WordPress plugin Bing Site Verification plugin using Meta Tag 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6.5AI score0.00369EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 5:46 a.m.8 views

SUSE CVE-2012-2582

Multiple cross-site scripting XSS vulnerabilities in Open Ticket Request System OTRS Help Desk 2.4.x before 2.4.13, 3.0.x before 3.0.15, and 3.1.x before 3.1.9, and OTRS ITSM 2.1.x before 2.1.5, 3.0.x before 3.0.6, and 3.1.x before 3.1.6, allow remote attackers to inject arbitrary web script or...

4.3CVSS6AI score0.04195EPSS
SaveExploits2References3
Rows per page
Query Builder