Lucene search
+L

187 matches found

CNNVD
CNNVD
added 2024/10/28 12:00 a.m.7 views

WordPress plugin PDF Generator Addon for Elementor Page Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. WordPress plugin PDF Generator Add...

6.5CVSS6AI score0.00255EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/10/24 10:02 a.m.9 views

WordPress PDF Generator Addon for Elementor Page Builder plugin <= 1.7.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin PDF Generator Addon for Elementor Page Builder versions = 1.7.4...

6.5CVSS5.9AI score0.00255EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/10/24 12:00 a.m.17 views

WordPress PDF Generator Addon for Elementor Page Builder Plugin <= 1.7.4 is vulnerable to Cross Site Scripting (XSS)

Software PDF Generator Addon for Elementor Page Builder Type Plugin Vulnerable versions = 1.7.4 Fixed in 1.7.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50449 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7f59036ae201 Credits João...

6.5CVSS6.3AI score0.00255EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/10/01 3:21 a.m.12 views

WordPress DK PDF plugin <= 1.9.6 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin DK PDF – WordPress PDF Generator versions = 1.9.6...

6.1CVSS6.3AI score0.00354EPSS
SaveExploits0References1Affected Software1
Packet Storm
Packet Storm
added 2024/09/09 12:00 a.m.272 views

PDF Generator Web Application 1.0 Insecure Settings

==================================================================================================================================== | Title : PDF Generator Web Application v1.0 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/13 12:00 a.m.242 views

Employees Pay Slip PDF Generator System 1.0 Cross Site Request Forgery

============================================================================================================================================= | Title : Employees Pay Slip PDF Generator System 1.0 CSRF Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefo...

7.4AI score
SaveExploits0
OSV
OSV
added 2024/07/09 8:15 a.m.8 views

CVE-2024-6316

The Generate PDF using Contact Form 7 plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 4.0.6. This is due to missing nonce validation and missing file type validation in the 'wpcf7pdfdashboardhtmlpage' function. This makes...

8.8CVSS6.4AI score0.00523EPSS
SaveExploits0References2
NVD
NVD
added 2024/02/05 10:15 p.m.30 views

CVE-2023-6953

The PDF Generator For Fluent Forms – The Contact Form Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the header, PDF body and footer content parameters in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping. This makes ...

5.4CVSS4.9AI score0.00393EPSS
SaveExploits0References2
OSV
OSV
added 2024/02/05 10:15 p.m.8 views

CVE-2023-6953

The PDF Generator For Fluent Forms – The Contact Form Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the header, PDF body and footer content parameters in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping. This makes ...

5.4CVSS5.9AI score0.00393EPSS
SaveExploits0References2
Prion
Prion
added 2024/02/05 10:15 p.m.23 views

Cross site scripting

The PDF Generator For Fluent Forms – The Contact Form Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the header, PDF body and footer content parameters in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping. This makes ...

4.9CVSS6.2AI score0.00393EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/05 9:21 p.m.21 views

CVE-2023-6953 PDF Generator For Fluent Forms <= 1.1.7 - Cross-Site Scripting

The PDF Generator For Fluent Forms – The Contact Form Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the header, PDF body and footer content parameters in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping. This makes ...

4.9CVSS6.8AI score0.00393EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/02/05 9:21 p.m.37 views

CVE-2023-6953 PDF Generator For Fluent Forms <= 1.1.7 - Cross-Site Scripting

The PDF Generator For Fluent Forms – The Contact Form Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the header, PDF body and footer content parameters in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping. This makes ...

4.9CVSS5.3AI score0.00393EPSS
SaveExploits0References2
CVE
CVE
added 2024/02/05 9:21 p.m.68 views

CVE-2023-6953

CVE-2023-6953: The PDF Generator For Fluent Forms – The Contact Form Plugin (WordPress) is vulnerable to Stored XSS via header, PDF body, and footer content in all versions up to 1.1.7 due to insufficient input sanitization and output escaping. Affected versions are

5.4CVSS5.7AI score0.00393EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/02/05 12:00 a.m.10 views

WordPress plugin PDF Generator For Fluent Forms Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. WordPress plugin is an application plug-in. WordPress plugin PDF Generator Fo...

5.4CVSS6AI score0.00393EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/01/23 12:00 a.m.20 views

WordPress PDF Generator For Fluent Forms Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)

Software PDF Generator For Fluent Forms Type Plugin Vulnerable versions = 1.1.7 Fixed in 1.1.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-6953 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f3bea2a974ac Credits drop...

5.4CVSS6AI score0.00393EPSS
SaveExploits0References3Affected Software1
WPVulnDB
WPVulnDB
added 2024/01/22 12:00 a.m.21 views

PDF Generator For Fluent Forms < 1.1.8 - Cross-Site Scripting

Description The PDF Generator For Fluent Forms – The Contact Form Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the header, PDF body and footer content parameters in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping...

4.9CVSS6AI score0.00393EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/03 12:00 a.m.23 views

The vulnerability of the dompdf library in the PDF Generator plugin of the WordPress content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the dompdf library in the PDF Generator plugin of the WordPress content management system is related to the lack of protective measures for website structures. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

6.1CVSS6AI score0.01193EPSS
SaveExploits2References5Affected Software1
OSV
OSV
added 2023/07/17 2:15 p.m.8 views

CVE-2023-35038

Cross-Site Request Forgery CSRF vulnerability in wpexperts.Io WP PDF Generator plugin = 1.2.2 versions...

8.8CVSS7.3AI score0.00248EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/17 2:15 p.m.27 views

CVE-2023-35038

Cross-Site Request Forgery CSRF vulnerability in wpexperts.Io WP PDF Generator plugin = 1.2.2 versions...

8.8CVSS0.00248EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/07/17 1:26 p.m.39 views

CVE-2023-35038 WordPress WP PDF Generator Plugin <= 1.2.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in wpexperts.Io WP PDF Generator plugin = 1.2.2 versions...

5.4CVSS9AI score0.00248EPSS
SaveExploits0References1
Rows per page
Query Builder