Lucene search
+L

10146 matches found

CNNVD
CNNVD
added 2026/03/11 12:00 a.m.13 views

Adobe Experience Manager(AEM) 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS5.7AI score0.00205EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/03/11 12:00 a.m.16 views

编号撤回

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.9AI score0.0003EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/03/11 12:00 a.m.16 views

WordPress plugin Gravity Forms 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

6.4CVSS5.7AI score0.00203EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/11 12:00 a.m.17 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS5.9AI score0.00167EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/03/11 12:00 a.m.15 views

WordPress plugin Name Directory 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.2CVSS5.7AI score0.00255EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/03/11 12:00 a.m.18 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS5.9AI score0.00167EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/03/11 12:00 a.m.18 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS5.9AI score0.00205EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/03/10 6:31 p.m.11 views

EUVD-2026-10479

The MetForm Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Quiz feature in all versions up to, and including, 3.9.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

7.2CVSS5.9AI score0.00308EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/03/10 6:31 p.m.11 views

EUVD-2026-10478

The MetForm Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Quiz feature in all versions up to, and including, 3.9.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

7.2CVSS5.9AI score0.00308EPSS
SaveExploits0References6
CVE
CVE
added 2026/03/10 9:58 a.m.26 views

CVE-2026-2724

CVE-2026-2724 concerns the WordPress plugin Unlimited Elements for Elementor (vulnerable up to 2.0.5). The issue is stored cross-site scripting via form entry fields, caused by insufficient input sanitization and output escaping on form submissions displayed in the admin Form Entries Trash view. ...

7.2CVSS5.9AI score0.00345EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/03/10 9:58 a.m.6 views

CVE-2026-2724

The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form entry fields in all versions up to, and including, 2.0.5. This is due to insufficient input sanitization and output escaping on form submission data displayed in the admin Form...

7.2CVSS5.9AI score0.00345EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2026/03/10 12:00 a.m.16 views

WordPress plugin Unlimited Elements for Elementor 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

7.2CVSS5.7AI score0.00345EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2026/03/10 12:00 a.m.17 views

WordPress plugin MetForm Pro 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.2CVSS5.8AI score0.00308EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/03/10 12:00 a.m.15 views

PT-2026-24196

Name of the Vulnerable Software and Affected Versions MetForm Pro plugin for WordPress versions through 3.9.6 Description The MetForm Pro plugin for WordPress is susceptible to Stored Cross-Site Scripting through the Quiz feature. Insufficient input sanitization and output escaping allow...

7.2CVSS6AI score0.00308EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
added 2026/03/08 7:56 a.m.10 views

CVE-2026-1805

The DA Media GigList plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's damediagiglist shortcode in all versions up to, and including, 1.9.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS5.9AI score0.00197EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/08 7:56 a.m.12 views

CVE-2026-1823

The Consensus Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's consensus shortcode in all versions up to, and including, 1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.9AI score0.00193EPSS
SaveExploits0References1
NVD
NVD
added 2026/03/07 8:16 a.m.11 views

CVE-2026-1574

The MyQtip – easy qTip2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's myqtip shortcode in all versions up to, and including, 2.0.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00159EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/07 2:16 a.m.8 views

CVE-2026-2431

The CM Custom Reports plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'datefrom' and 'dateto' parameters in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

6.1CVSS0.00223EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/03/07 12:00 a.m.15 views

WordPress plugin MailArchiver 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

4.8CVSS5.8AI score0.00195EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/03/07 12:00 a.m.16 views

PT-2026-23835

Name of the Vulnerable Software and Affected Versions WP App Bar plugin for WordPress versions up to and including 1.5 Description The WP App Bar plugin for WordPress is susceptible to Stored Cross-Site Scripting through the app-bar-features parameter. This is a result of inadequate input...

7.2CVSS5.9AI score0.00233EPSS
SaveExploits0References9
Rows per page
Query Builder