Lucene search
+L

7 matches found

osv_cve
osv_cve
•added 2021/09/09 7:15 p.m.•17 views

CVE-2021-38319

The More From Google WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /morefromgoogle.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.0.2...

6.1CVSS6.4AI score0.00895EPSS
SaveExploits1References2
NVD
NVD
•added 2021/09/09 7:15 p.m.•28 views

CVE-2021-38319

The More From Google WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /morefromgoogle.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.0.2...

6.1CVSS0.00895EPSS
SaveExploits1References2
CVE
CVE
•added 2021/09/09 6:10 p.m.•61 views

CVE-2021-38319

CVE-2021-38319 affects the WordPress plugin More From Google (versions up to 0.0.2). The vulnerability is a Reflected XSS caused by a reflected $_SERVER["PHP_SELF"] in the file ~/morefromgoogle.php, enabling injection of arbitrary scripts. The connected sources confirm the affected component and ...

6.1CVSS6AI score0.00895EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2021/09/09 6:10 p.m.•5 views

CVE-2021-38319

The More From Google WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /morefromgoogle.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.0.2...

6.1CVSS0.00895EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/09/09 12:00 a.m.•16 views

WordPress plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. WordPress plugin More From Google 0.0 .2 before the version o...

6.1CVSS6.1AI score0.00895EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/09 12:00 a.m.•10 views

CVE-2021-38319: Improper Neutralization of Input During Web Page Generation

The More From Google WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /morefromgoogle.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.0.2...

6.1CVSS5.8AI score0.00895EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/09/09 12:00 a.m.•7 views

PT-2021-22036

Name of the Vulnerable Software and Affected Versions: More From Google WordPress plugin versions up to and including 0.0.2 Description: The issue allows attackers to inject arbitrary web scripts due to a reflected $ SERVER"PHP SELF" value in the /morefromgoogle.php file. This enables Reflected...

6.1CVSS0.00895EPSS
SaveExploits1References4
Rows per page
Query Builder