Lucene search
+L

697 matches found

CNNVD
CNNVD
•added 2025/05/19 12:00 a.m.•19 views

WordPress plugin Shortlinks by Pretty Links 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

4.3CVSS4.7AI score0.00307EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/04/26 7:06 a.m.•12 views

Malicious code in pretty-cli-logger (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 94cd11911ce2a0937d9e56087ce9487db18da5bb20df7f1f8948f8356d65c31d Contains an obfuscated code that will download and run a remote script. At the time of the analysis, the remote URLs were delivering empty results --- Category...

7.3AI score
SaveExploits0References1
OSV
OSV
•added 2025/04/26 7:06 a.m.•25 views

MAL-2025-191816 Malicious code in pretty-cli-logger (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 94cd11911ce2a0937d9e56087ce9487db18da5bb20df7f1f8948f8356d65c31d Contains an obfuscated code that will download and run a remote script. At the time of the analysis, the remote URLs were delivering empty results --- Category...

7.2AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/26 2:50 p.m.•15 views

CVE-2025-30551

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in smartredfox Pretty file links pretty-file-links allows Stored XSS.This issue affects Pretty file links: from n/a through = 0.9...

6.5CVSS7.2AI score0.0036EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/24 2:15 p.m.•16 views

CVE-2025-30551

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in smartredfox Pretty file links pretty-file-links allows Stored XSS.This issue affects Pretty file links: from n/a through = 0.9...

6.5CVSS0.0036EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/24 1:46 p.m.•65 views

CVE-2025-30551

CVE-2025-30551 concerns the WordPress plugin Pretty file links, which is affected by a Stored Cross-Site Scripting (XSS) vulnerability. The issue is described as stored XSS in Pretty file links (version range “from n/a through 0.9”). Connected sources indicate the vulnerability status as Unpatche...

6.5CVSS7.2AI score0.0036EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/03/24 1:29 p.m.•15 views

WordPress Pretty file links plugin <= 0.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin Pretty file links versions = 0.9...

6.5CVSS6.1AI score0.0036EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2025/03/24 12:00 a.m.•19 views

WordPress plugin Pretty file links 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

6.5CVSS7.7AI score0.0036EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/24 12:00 a.m.•4 views

CVE-2025-30551: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in smartredfox Pretty file links pretty-file-links allows Stored XSS.This issue affects Pretty file links: from n/a through = 0.9...

6.5CVSS5.8AI score0.0036EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/24 12:00 a.m.•4 views

PT-2025-12601

Name of the Vulnerable Software and Affected Versions Pretty file links versions n/a through 0.9 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS in Pretty file links. Recommendations For...

6.5CVSS0.0036EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2025/03/18 4:30 p.m.•12 views

thunderbird: Crafted email message incorrectly shown as being encrypted

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted...

7CVSS6.5AI score0.00356EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2025/03/17 5:36 p.m.•15 views

thunderbird: Downloading of OpenPGP keys from WKD used incorrect padding

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: When requesting an OpenPGP key from a WKD server, an incorrect padding size was used, and a network observer could have learned the length of the requested email address...

5.3CVSS6AI score0.00156EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2025/02/06 2:21 a.m.•16 views

CVE-2025-22564

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in faaiq Pretty Url pretty-url allows Reflected XSS.This issue affects Pretty Url: from n/a through = 1.5.4...

7.1CVSS7.2AI score0.00308EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 8:03 a.m.•19 views

CVE-2024-29770

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pretty Links Shortlinks by Pretty Links allows Reflected XSS.This issue affects Shortlinks by Pretty Links: from n/a through 3.6.2...

7.1CVSS8.6AI score0.00418EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/31 9:15 a.m.•12 views

CVE-2025-22564

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in faaiq Pretty Url pretty-url allows Reflected XSS.This issue affects Pretty Url: from n/a through = 1.5.4...

7.1CVSS0.00308EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/31 8:23 a.m.•11 views

CVE-2025-22564 WordPress Pretty Url Plugin <= 1.5.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in faaiq Pretty Url pretty-url allows Reflected XSS.This issue affects Pretty Url: from n/a through = 1.5.4...

7.1CVSS8.6AI score0.00308EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/31 8:23 a.m.•36 views

CVE-2025-22564 WordPress Pretty Url Plugin <= 1.5.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in faaiq Pretty Url pretty-url allows Reflected XSS.This issue affects Pretty Url: from n/a through = 1.5.4...

7.1CVSS0.00308EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/31 12:00 a.m.•5 views

CVE-2025-22564: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in faaiq Pretty Url pretty-url allows Reflected XSS.This issue affects Pretty Url: from n/a through = 1.5.4...

7.1CVSS5.8AI score0.00308EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/31 12:00 a.m.•16 views

WordPress plugin Pretty Url 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

7.1CVSS7.7AI score0.00308EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/31 12:00 a.m.•17 views

PT-2025-4555 · Unknown · Faaiq Pretty Url

Name of the Vulnerable Software and Affected Versions: Faaiq Pretty Url versions 1.5.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means an attacker can inject...

7.1CVSS7AI score0.00308EPSS
SaveExploits0References3
Rows per page
Query Builder