Lucene search
K

43 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-49387

Malicious code in bioql PyPI...

6.1CVSS6.5AI score0.02784EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-57438

Malicious code in bioql PyPI...

8.1CVSS8.5AI score0.00205EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:15 a.m.4 views

CVE-2023-47545

Auth. editor+ Stored Cross-Site Scripting XSS vulnerability in Fatcat Apps Forms for Mailchimp by Optin Cat – Grow Your MailChimp List plugin = 2.5.4 versions...

5.9CVSS5.6AI score0.0013EPSS
Exploits0References1
NVD
NVD
added 2024/12/03 11:15 a.m.15 views

CVE-2024-11326

The Campaign Monitor Forms by Optin Cat plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.5.7. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS0.01684EPSS
Exploits0References3
CVE
CVE
added 2024/12/03 11:4 a.m.44 views

CVE-2024-11326

CVE-2024-11326 relates to the WordPress plugin Campaign Monitor Forms by Optin Cat. It describes a Reflected Cross-Site Scripting vulnerability in all versions up to 2.5.7 caused by using add_query_arg without proper escaping on the URL. This enables unauthenticated attackers to inject JavaScript...

6.1CVSS6.1AI score0.01684EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/12/03 11:4 a.m.17 views

CVE-2024-11326 Campaign Monitor Forms by Optin Cat <= 2.5.7 - Reflected Cross-Site Scripting

The Campaign Monitor Forms by Optin Cat plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.5.7. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS0.01684EPSS
Exploits0References3
CVE
CVE
added 2024/12/03 9:32 a.m.50 views

CVE-2024-11325

CVE-2024-11325 concerns the AWeber Forms by Optin Cat WordPress plugin. It is a Reflected Cross-Site Scripting vulnerability caused by improper escaping of add_query_arg usage, affecting all versions up to and including 2.5.7. Unauthenticated attackers could inject arbitrary scripts into pages ex...

5.2CVSS5.1AI score0.00606EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/12/03 9:32 a.m.14 views

CVE-2024-11325 AWeber Forms by Optin Cat <= 2.5.7 - Reflected Cross-Site Scripting

The AWeber Forms by Optin Cat plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.5.7. This makes it possible for unauthenticated attackers to inject arbitrary web script...

5.2CVSS0.00606EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/12/03 9:32 a.m.11 views

CVE-2024-11325 AWeber Forms by Optin Cat <= 2.5.7 - Reflected Cross-Site Scripting

The AWeber Forms by Optin Cat plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.5.7. This makes it possible for unauthenticated attackers to inject arbitrary web script...

5.2CVSS6.5AI score0.00606EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/12/03 12:0 a.m.1 views

WordPress plugin Campaign Monitor Forms by Optin Cat 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

6.1CVSS7.3AI score0.01684EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/12/03 12:0 a.m.1 views

WordPress plugin AWeber Forms by Optin Cat 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

5.2CVSS7.4AI score0.00606EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/12/03 12:0 a.m.1 views

PT-2024-16911 · WordPress · Aweber Forms

Name of the Vulnerable Software and Affected Versions: AWeber Forms by Optin Cat plugin for WordPress versions up to, and including, 2.5.7 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg without appropriate escaping on the URL. This allows...

5.2CVSS6.8AI score0.00606EPSS
Exploits0References8
Patchstack
Patchstack
added 2024/12/02 11:55 p.m.1 views

WordPress Campaign Monitor Forms by Optin Cat plugin <= 2.5.7 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Campaign Monitor Forms versions = 2.5.7...

6.1CVSS6.3AI score0.01684EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/26 3:13 a.m.10 views

CVE-2024-8870 Forms for Mailchimp by Optin Cat – Grow Your MailChimp List <= 2.5.7 - Reflected Cross-Site Scripting

The Forms for Mailchimp by Optin Cat – Grow Your MailChimp List plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.5.7. This makes it possible for unauthenticated...

6.1CVSS6.1AI score0.01371EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/10/26 3:13 a.m.20 views

CVE-2024-8870 Forms for Mailchimp by Optin Cat – Grow Your MailChimp List <= 2.5.7 - Reflected Cross-Site Scripting

The Forms for Mailchimp by Optin Cat – Grow Your MailChimp List plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.5.7. This makes it possible for unauthenticated...

6.1CVSS0.01371EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/10/26 12:0 a.m.4 views

PT-2024-39288 · WordPress · Forms For Mailchimp By Optin Cat

Name of the Vulnerable Software and Affected Versions: The Forms for Mailchimp by Optin Cat – Grow Your MailChimp List plugin for WordPress versions up to, and including, 2.5.6 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg without appropriate...

6.1CVSS6.5AI score0.01371EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/10/26 12:0 a.m.2 views

WordPress plugin Forms for Mailchimp by Optin Cat 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

6.1CVSS5.8AI score0.01371EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/10/25 6:17 p.m.3 views

WordPress Forms for Mailchimp by Optin Cat plugin <= 2.5.6 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Forms for Mailchimp by Optin Cat versions = 2.5.6...

6.1CVSS6.3AI score0.01371EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/10/25 12:0 a.m.25 views

WordPress Forms for Mailchimp by Optin Cat Plugin <= 2.5.6 is vulnerable to Cross Site Scripting (XSS)

Software Forms for Mailchimp by Optin Cat Type Plugin Vulnerable versions = 2.5.6 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8870 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 95ff17d053e3 Credits vgo...

6.1CVSS5.7AI score0.01371EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2024/10/18 5:15 a.m.11 views

CVE-2024-8740

The GetResponse Forms by Optin Cat plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.5.7. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS0.02784EPSS
Exploits0References3
Rows per page
Query Builder