Lucene search
K

10 matches found

OSV
OSV
added 2023/11/06 10:15 a.m.0 views

CVE-2023-46782

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Chris Yee MomentoPress for Momento360 plugin = 1.0.1 versions...

5.4CVSS7.3AI score0.00077EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/11/06 10:15 a.m.0 views

CVE-2023-46782

A vulnerability in Chris Yee MomentoPress for Momento360 cmyee-momentopress.This issue affects MomentoPress for Momento360: from n/a through = 1.0.1...

6.5CVSS6.7AI score0.00077EPSS
Exploits0References3
NVD
NVD
added 2023/11/06 10:15 a.m.13 views

CVE-2023-46782

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Chris Yee MomentoPress for Momento360 plugin = 1.0.1 versions...

6.5CVSS5.2AI score0.00077EPSS
Exploits0References1
CVE
CVE
added 2023/11/06 9:20 a.m.48 views

CVE-2023-46782

CVE-2023-46782 describes a Stored XSS in the Chris Yee MomentoPress for Momento360 WordPress plugin, affected versions

6.5CVSS5.3AI score0.00077EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/06 9:20 a.m.18 views

CVE-2023-46782 WordPress MomentoPress for Momento360 Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Chris Yee MomentoPress for Momento360 plugin = 1.0.1 versions...

6.5CVSS5.4AI score0.00077EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/11/06 9:20 a.m.9 views

CVE-2023-46782 WordPress MomentoPress for Momento360 Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Chris Yee MomentoPress for Momento360 plugin = 1.0.1 versions...

6.5CVSS5.6AI score0.00077EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/11/06 12:0 a.m.0 views

WordPress Plugin MomentoPress for Momento360 Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin MomentoPre...

5.4CVSS6AI score0.00077EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/11/06 12:0 a.m.2 views

PT-2023-30212 · Chris Yee · Chris Yee Momentopress For Momento360

Name of the Vulnerable Software and Affected Versions: Chris Yee MomentoPress for Momento360 plugin version 1.0.1 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability, which requires authentication as a contributor or higher. This vulnerability allows a...

5.4CVSS8AI score0.00077EPSS
Exploits0References5
WPVulnDB
WPVulnDB
added 2023/11/06 12:0 a.m.13 views

MomentoPress for Momento360 < 1.0.2 - Contributor+ Stored XSS

Description The plugin does not validate and escape some parameters, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

5.4CVSS5.7AI score0.00077EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2023/10/26 12:0 a.m.10 views

WordPress MomentoPress for Momento360 Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software MomentoPress for Momento360 Type Plugin Vulnerable versions = 1.0.1 Fixed in 1.0.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-46782 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID f1a1dbc78af1 Credits Ngô Thiên An ancorn...

5.4CVSS6.5AI score0.00077EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder