Lucene search
K

30 matches found

Patchstack
Patchstack
added 2026/02/05 9:26 p.m.5 views

WordPress Keap Official Opt-in Forms plugin < 1.0.12 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by MINGYOUNG BAN in WordPress Plugin Keap Official Opt-in Forms versions 1.0.12...

4.8CVSS5.3AI score0.00081EPSS
Exploits2References1Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-42567

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00193EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-56865

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00077EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:24 a.m.1 views

CVE-2023-52192

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Keap Keap Official Opt-in Forms allows Stored XSS.This issue affects Keap Official Opt-in Forms: from n/a through 1.0.11...

6.5CVSS6.7AI score0.00077EPSS
Exploits0References1
OSV
OSV
added 2025/02/18 5:15 a.m.1 views

CVE-2024-13725

The Keap Official Opt-in Forms plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0.1 via the service parameter. This makes it possible for unauthenticated attackers to include PHP files on the server, allowing the execution of any PHP code in those...

9.8CVSS7.7AI score
Exploits0References3
NVD
NVD
added 2025/02/18 5:15 a.m.14 views

CVE-2024-13725

The Keap Official Opt-in Forms plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0.1 via the service parameter. This makes it possible for unauthenticated attackers to include PHP files on the server, allowing the execution of any PHP code in those...

9.8CVSS0.00397EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/02/18 4:21 a.m.6 views

CVE-2024-13725 Keap Official Opt-in Forms <= 2.0.1 - Unauthenticated Limited Local File Inclusion

The Keap Official Opt-in Forms plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0.1 via the service parameter. This makes it possible for unauthenticated attackers to include PHP files on the server, allowing the execution of any PHP code in those...

9.8CVSS7.8AI score0.00397EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/02/18 12:0 a.m.1 views

WordPress plugin Keap Official Opt-in Forms 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A path traversal vulnerability exists in WordPress...

9.8CVSS8.6AI score0.00397EPSS
Exploits0References3
NVD
NVD
added 2024/10/05 1:15 p.m.11 views

CVE-2024-47642

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Keap Keap Official Opt-in Forms infusionsoft-official-opt-in-forms allows Stored XSS.This issue affects Keap Official Opt-in Forms: from n/a through = 2.0.3...

6.5CVSS0.00193EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/10/05 12:59 p.m.21 views

CVE-2024-47642 WordPress Keap Official Opt-in Forms plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Keap Keap Official Opt-in Forms infusionsoft-official-opt-in-forms allows Stored XSS.This issue affects Keap Official Opt-in Forms: from n/a through = 2.0.3...

6.5CVSS0.00193EPSS
Exploits0References1
CVE
CVE
added 2024/10/05 12:59 p.m.40 views

CVE-2024-47642

CVE-2024-47642 is a stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Keap Official Opt-in Forms (infusionsoft-official-opt-in-forms) that allows stored XSS via improper input neutralization during web page generation. Affected versions are up to 2.0.1 (listed as n/a through...

6.5CVSS5.9AI score0.00193EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/10/05 12:0 a.m.1 views

WordPress plugin Keap Official Opt-in Forms 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPre...

6.5CVSS6.2AI score0.00193EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/10/05 12:0 a.m.1 views

PT-2024-32700 · Keap · Keap Official Opt-In Forms

Name of the Vulnerable Software and Affected Versions: Keap Official Opt-in Forms versions prior to 2.0.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations:...

6.5CVSS5.8AI score0.00193EPSS
Exploits0References5
Patchstack
Patchstack
added 2024/09/30 12:22 p.m.1 views

WordPress Keap Official Opt-in Forms plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Keap Official Opt-in Forms versions = 2.0.3...

6.5CVSS6.1AI score0.00193EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/09/30 12:0 a.m.6 views

WordPress Keap Official Opt-in Forms Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Keap Official Opt-in Forms Type Plugin Vulnerable versions = 2.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47642 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID bd939afd94d0 Credits stealthcopter Required...

6.5CVSS6.5AI score0.00193EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2024/02/01 10:15 a.m.15 views

CVE-2023-52192

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Keap Keap Official Opt-in Forms allows Stored XSS.This issue affects Keap Official Opt-in Forms: from n/a through 1.0.11...

6.5CVSS6.4AI score0.00077EPSS
Exploits0References1
OSV
OSV
added 2024/02/01 10:15 a.m.1 views

CVE-2023-52192

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Keap Keap Official Opt-in Forms allows Stored XSS.This issue affects Keap Official Opt-in Forms: from n/a through 1.0.11...

5.4CVSS7.3AI score0.00077EPSS
Exploits0References1
Prion
Prion
added 2024/02/01 10:15 a.m.14 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Keap Keap Official Opt-in Forms allows Stored XSS.This issue affects Keap Official Opt-in Forms: from n/a through 1.0.11...

4.9CVSS6.9AI score0.00077EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2024/02/01 9:52 a.m.37 views

CVE-2023-52192

CVE-2023-52192: Keap Official Opt-in Forms for WordPress is vulnerable to Stored Cross-Site Scripting due to improper input neutralization. Affected are Keap Official Opt-in Forms up to version 1.0.11 (and related notes indicate the issue may persist in older builds). The vulnerability stems from...

6.5CVSS6.7AI score0.00077EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/02/01 9:52 a.m.22 views

CVE-2023-52192 WordPress Keap Official Opt-in Forms Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Keap Keap Official Opt-in Forms allows Stored XSS.This issue affects Keap Official Opt-in Forms: from n/a through 1.0.11...

6.5CVSS6.6AI score0.00077EPSS
Exploits0References1
Rows per page
Query Builder