Lucene search
K

8 matches found

NVD
NVD
added 2024/11/21 11:15 a.m.6 views

CVE-2024-11360

The Page Parts plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of removequeryarg without appropriate escaping on the URL in all versions up to, and including, 1.4.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

6.1CVSS0.0153EPSS
Exploits0References10
Cvelist
Cvelist
added 2024/11/21 2:6 a.m.12 views

CVE-2024-11360 Page Parts <= 1.4.3 - Reflected Cross-Site Scripting

The Page Parts plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of removequeryarg without appropriate escaping on the URL in all versions up to, and including, 1.4.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

6.1CVSS0.0153EPSS
Exploits0References10
CVE
CVE
added 2024/11/21 2:6 a.m.50 views

CVE-2024-11360

CVE-2024-11360 → WordPress Page Parts plugin

6.1CVSS6AI score0.0153EPSS
Exploits0References10Affected Software1
Patchstack
Patchstack
added 2024/11/20 9:17 p.m.3 views

WordPress Page Parts plugin <= 1.4.3 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Page Parts versions = 1.4.3...

6.1CVSS6.1AI score0.0153EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/11/20 12:0 a.m.9 views

WordPress Page Parts Plugin <= 1.4.3 is vulnerable to Cross Site Scripting (XSS)

Software Page Parts Type Plugin Vulnerable versions = 1.4.3 Fixed in 1.4.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11360 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6c5273fd367a Credits vgo0 Required privileg...

6.1CVSS6AI score0.0153EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2018/02/21 4:29 p.m.1 views

CVE-2018-7261

There are multiple Persistent XSS vulnerabilities in Radiant CMS 1.1.4. They affect Personal Preferences Name and Username and Configuration Site Title, Dev Site Domain, Page Parts, and Page Fields...

5.4CVSS5.8AI score
Exploits0References2
Cvelist
Cvelist
added 2018/02/21 4:0 p.m.23 views

CVE-2018-7261

There are multiple Persistent XSS vulnerabilities in Radiant CMS 1.1.4. They affect Personal Preferences Name and Username and Configuration Site Title, Dev Site Domain, Page Parts, and Page Fields...

5.5AI score0.00195EPSS
Exploits2References2
0day.today
0day.today
added 2018/02/21 12:0 a.m.38 views

Radiant CMS 1.1.4 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications 1. Introduction Vendor : Radiant Affected Product : Radiant CMS 1.1.4 Fixed in : NA Vendor Website : http://radiantcms.org/ Vulnerability Type : Persistent XSS Remote Exploitable : Yes CVE External Identifier : CVE-2018-7261 2. Overview...

3.5CVSS0.1AI score0.00195EPSS
Exploits2
Rows per page
Query Builder