Lucene search
+L

6180 matches found

CNNVD
CNNVD
•added 2023/10/20 12:00 a.m.•16 views

WordPress theme Hueman Cross-Site Request Forgery Vulnerability

WordPress is a blogging platform developed in PHP by the WordPress Foundation. The platform supports personal blog sites on PHP and MySQL servers.WordPress theme is a theme for WordPress. A security vulnerability exists in WordPress theme Hueman, which stems from a missing or incorrect random...

4.3CVSS6.5AI score0.00476EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2023/10/20 12:00 a.m.•23 views

WordPress Plugin Coupon Creator Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

4.3CVSS6.5AI score0.00476EPSS
SaveExploits1References10
attackerkb
attackerkb
•added 2023/10/19 10:15 p.m.•15 views

CVE-2023-43344

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description parameter in the Pages Menu component...

5.4CVSS6.1AI score0.00655EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2023/10/19 10:15 p.m.•22 views

CVE-2023-43344

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description parameter in the Pages Menu component...

5.4CVSS6.1AI score0.00655EPSS
SaveExploits1References1
NVD
NVD
•added 2023/10/19 10:15 p.m.•51 views

CVE-2023-43344

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description parameter in the Pages Menu component...

5.4CVSS5.5AI score0.00655EPSS
SaveExploits1References1
Prion
Prion
•added 2023/10/19 10:15 p.m.•30 views

Cross site scripting

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description parameter in the Pages Menu component...

4.9CVSS5.5AI score0.00655EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2023/10/19 12:00 a.m.•65 views

CVE-2023-43344

CVE-2023-43344 concerns OpenSolution Quick CMS v6.7. The vulnerability is a Cross-Site Scripting (XSS) flaw in the SEO - Meta description field of the Pages Menu component, allowing a local attacker to execute arbitrary script via a crafted payload. Root cause reported across sources is insuffici...

5.4CVSS5.4AI score0.00655EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2023/10/19 12:00 a.m.•57 views

CVE-2023-43344

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description parameter in the Pages Menu component...

5.7AI score0.00655EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2023/10/19 12:00 a.m.•24 views

CVE-2023-43344

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description parameter in the Pages Menu component...

6.2AI score0.00655EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/19 12:00 a.m.•9 views

CVE-2023-43344: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description parameter in the Pages Menu component...

5.4CVSS6.5AI score0.00655EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/10/19 12:00 a.m.•23 views

PT-2023-28793 · Opensolution · Opensolution Quick Cms

Name of the Vulnerable Software and Affected Versions: opensolution Quick CMS version 6.7 Description: A cross-site scripting XSS issue allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description parameter in the Pages Menu component. This enables the...

5.4CVSS6.4AI score0.00655EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2023/10/19 12:00 a.m.•23 views

OpenSolution Quick CMS Cross-Site Script Vulnerability

OpenSolution Quick CMS is a free content management system organized by OpenSolution. A cross-site scripting vulnerability exists in OpenSolution Quick CMS v6.7, which stems from the lack of effective filtering and escaping of user-supplied data in the SEO - Meta description parameter of the Page...

5.4CVSS6AI score0.00655EPSS
SaveExploits1References2
Patchstack
Patchstack
•added 2023/10/17 12:00 a.m.•22 views

WordPress Category SEO Meta Tags Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)

Software Category SEO Meta Tags Type Plugin Vulnerable versions = 2.5 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-46091 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 4500a2d3e3df Credits LEE SE HYOUNG...

5.9CVSS5.7AI score0.00362EPSS
SaveExploits0References1Affected Software1
wpexploit
wpexploit
•added 2023/10/13 12:00 a.m.•251 views

Gutenberg < 16.8.1 - Contributor+ Stored XSS

Description The plugin does not adequately escape the content of the footnotes within the paragraph block of the block editor, leading to a Contributor+ Cross-Site Scripting vulnerability. 1. Create a new post as a Contributor user. 2. Add a paragraph block and add a footnote to the paragraph. 3...

6.6AI score
SaveExploits0
osv_cve
osv_cve
•added 2023/10/12 1:15 p.m.•20 views

CVE-2023-44998

Cross-Site Request Forgery CSRF vulnerability in josecoelho, Randy Hoyt, steveclarkcouk, Vitaliy Kukin, Eric Le Bail, Tom Ransom Category Meta plugin plugin = 1.2.8 versions...

8.8CVSS7.3AI score0.00256EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/12 1:15 p.m.•45 views

CVE-2023-44998

Cross-Site Request Forgery CSRF vulnerability in josecoelho, Randy Hoyt, steveclarkcouk, Vitaliy Kukin, Eric Le Bail, Tom Ransom Category Meta plugin plugin = 1.2.8 versions...

8.8CVSS5.8AI score0.00256EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/12 1:15 p.m.•32 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in josecoelho, Randy Hoyt, steveclarkcouk, Vitaliy Kukin, Eric Le Bail, Tom Ransom Category Meta plugin plugin = 1.2.8 versions...

6.8CVSS8.8AI score0.00256EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/10/12 12:10 p.m.•78 views

CVE-2023-44998

CVE-2023-44998 is a CSRF vulnerability in the WordPress plugin Category Meta (authors listed) affecting versions

8.8CVSS6.5AI score0.00256EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/10/12 12:10 p.m.•36 views

CVE-2023-44998 WordPress Category Meta Plugin <= 1.2.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in josecoelho, Randy Hoyt, steveclarkcouk, Vitaliy Kukin, Eric Le Bail, Tom Ransom Category Meta plugin plugin = 1.2.8 versions...

4.3CVSS9AI score0.00256EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/10/12 12:10 p.m.•16 views

CVE-2023-44998 WordPress Category Meta Plugin <= 1.2.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in josecoelho, Randy Hoyt, steveclarkcouk, Vitaliy Kukin, Eric Le Bail, Tom Ransom Category Meta plugin plugin = 1.2.8 versions...

4.3CVSS7.1AI score0.00256EPSS
SaveExploits0References1
Rows per page
Query Builder