Lucene search
+L

98 matches found

CNNVD
CNNVD
added 2025/02/14 12:0 a.m.8 views

WordPress plugin NoFollow Free 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS7.6AI score0.00241EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/01/16 6:42 p.m.5 views

WordPress NoFollow Free plugin <= 1.6.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin NoFollow Free versions = 1.6.3...

7.1CVSS6.1AI score0.00241EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2024/12/13 12:0 a.m.5 views

WordPress plugin Bulk NoIndex & NoFollow Toolkit 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

5.4CVSS8.4AI score0.00461EPSS
SaveExploits0References1
CVE
CVE
added 2024/09/26 2:3 a.m.57 views

CVE-2024-8803

CVE-2024-8803 affects the Bulk NoIndex & NoFollow Toolkit for WordPress (versions up to 2.15). Root cause: Reflected Cross-Site Scripting caused by using remove_query_arg without proper escaping, enabling unauthenticated attackers to inject scripts when a user is tricked into clicking a link. Imp...

6.1CVSS6.3AI score0.0037EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2024/09/26 12:0 a.m.30 views

WordPress plugin Bulk NoIndex & NoFollow Toolkit 跨站脚本漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin Bulk...

6.1CVSS6AI score0.0037EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2024/09/26 12:0 a.m.19 views

WordPress Bulk NoIndex & NoFollow Toolkit Plugin <= 2.15 is vulnerable to Cross Site Scripting (XSS)

Software Bulk NoIndex & NoFollow Toolkit Type Plugin Vulnerable versions = 2.15 Fixed in 2.16 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8803 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 78a9bff492c8 Credits vgo0...

6.1CVSS5.7AI score0.0037EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/09/25 12:0 a.m.13 views

PT-2024-39268 · WordPress · Bulk Noindex & Nofollow Toolkit

Name of the Vulnerable Software and Affected Versions: The Bulk NoIndex & NoFollow Toolkit plugin for WordPress versions up to, and including, 2.15 Description: The issue is related to Reflected Cross-Site Scripting due to the use of remove query arg without appropriate escaping on the URL. This...

6.1CVSS6.7AI score0.0037EPSS
SaveExploits0References10
NVD
NVD
added 2024/03/27 1:15 p.m.27 views

CVE-2024-29791

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mad Fish Digital Bulk NoIndex & NoFollow Toolkit allows Reflected XSS.This issue affects Bulk NoIndex & NoFollow Toolkit: from n/a through 2.01...

7.1CVSS6.9AI score0.00418EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/27 12:43 p.m.18 views

CVE-2024-29791 WordPress Bulk NoIndex & NoFollow Toolkit plugin <= 2.01 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mad Fish Digital Bulk NoIndex & NoFollow Toolkit allows Reflected XSS.This issue affects Bulk NoIndex & NoFollow Toolkit: from n/a through 2.01...

7.1CVSS7AI score0.00418EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/27 12:43 p.m.67 views

CVE-2024-29791

Technical details are not provided in the supplied documents; CVE-2024-29791 is described as a reflected XSS in Bulk NoIndex & NoFollow Toolkit (WordPress plugin) up to version 2.01; no exploit specifics or mitigations are specified here.

7.1CVSS8.6AI score0.00418EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/27 12:43 p.m.30 views

CVE-2024-29791 WordPress Bulk NoIndex & NoFollow Toolkit plugin <= 2.01 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mad Fish Digital Bulk NoIndex & NoFollow Toolkit allows Reflected XSS.This issue affects Bulk NoIndex & NoFollow Toolkit: from n/a through 2.01...

7.1CVSS7.1AI score0.00418EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/27 12:0 a.m.7 views

WordPress Plugin Bulk NoIndex & NoFollow Toolkit 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

7.1CVSS7AI score0.00418EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/03/27 12:0 a.m.7 views

PT-2024-23035 · Mad Fish Digital · Mad Fish Digital Bulk Noindex & Nofollow Toolkit

Name of the Vulnerable Software and Affected Versions: Mad Fish Digital Bulk NoIndex & NoFollow Toolkit versions through 2.01 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS...

7.1CVSS9.3AI score0.00418EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2024/03/25 12:0 a.m.13 views

WordPress Bulk NoIndex & NoFollow Toolkit Plugin <= 2.01 is vulnerable to Cross Site Scripting (XSS)

Software Bulk NoIndex & NoFollow Toolkit Type Plugin Vulnerable versions = 2.01 Fixed in 2.10 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29791 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID bea274e4e958 Credits Le Ngoc Anh Requir...

7.1CVSS6.8AI score0.00418EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/01/25 12:0 a.m.11 views

WordPress Ultimate Noindex Nofollow Tool Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Ultimate Noindex Nofollow Tool Type Plugin Vulnerable versions = 1.1.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-7196 Patch priority Low CVSS severity Low 6.1 Developer Claim ownership PSID ac8caedfb482 Credits Daniel...

7AI score0.00176EPSS
SaveExploits2References2Affected Software1
WPVulnDB
WPVulnDB
added 2023/10/20 12:0 a.m.20 views

Bulk NoIndex & NoFollow Toolkit < 1.5 - Reflected XSS

Description The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS6.1AI score0.00331EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2023/10/18 1:15 p.m.5 views

CVE-2023-45065

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Mad Fish Digital Bulk NoIndex & NoFollow Toolkit plugin = 1.42 versions...

6.1CVSS7.3AI score0.00331EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/18 1:15 p.m.35 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Mad Fish Digital Bulk NoIndex & NoFollow Toolkit plugin = 1.42 versions...

5.8CVSS6AI score0.00331EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/18 12:27 p.m.22 views

CVE-2023-45065 WordPress Bulk NoIndex & NoFollow Toolkit Plugin <= 1.42 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Mad Fish Digital Bulk NoIndex & NoFollow Toolkit plugin = 1.42 versions...

7.1CVSS5.8AI score0.00331EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/10/18 12:27 p.m.29 views

CVE-2023-45065 WordPress Bulk NoIndex & NoFollow Toolkit Plugin <= 1.42 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Mad Fish Digital Bulk NoIndex & NoFollow Toolkit plugin = 1.42 versions...

7.1CVSS6.3AI score0.00331EPSS
SaveExploits0References1
Rows per page
Query Builder