Lucene search
+L

12860 matches found

CVE
CVE
added 2021/03/25 7:21 p.m.59 views

CVE-2021-29010

CVE-2021-29010 is a cross-site scripting (XSS) vulnerability in SEO Panel version 4.8.0. The flaw allows remote attackers to inject JavaScript via archive.php in the report_type parameter. Multiple sources (NVD, Red Hat, CNVD, OSV, CVE lists) corroborate the issue; exploitation and impact are con...

4.8CVSS4.9AI score0.00755EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2021/03/25 7:21 p.m.193 views

CVE-2021-29009

SEO Panel 4.8.0 is affected by a cross-site scripting (XSS) vulnerability. The issue arises in archive.php via the type parameter, allowing remote attackers to inject JavaScript. Documented impact includes partial integrity and low confidentiality impact with network attack vector and user intera...

4.8CVSS4.9AI score0.00828EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/03/25 7:21 p.m.27 views

CVE-2021-29008

A cross-site scripting XSS issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via webmaster-tools.php in the "totime" parameter...

5.2AI score0.00755EPSS
SaveExploits1References1
CVE
CVE
added 2021/03/25 7:21 p.m.62 views

CVE-2021-29008

CVE-2021-29008 : SEO Panel 4.8.0 contains a cross-site scripting (XSS) flaw in the webmaster-tools.php endpoint, exploitable via the to_time parameter to inject JavaScript. Several connected sources corroborate the vulnerability in SEO Panel 4.8.0 and describe the input point as the attack surfac...

4.8CVSS4.9AI score0.00755EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2021/03/25 12:0 a.m.13 views

PT-2021-18021 · Seo Panel · Seo Panel

Name of the Vulnerable Software and Affected Versions: SEO Panel version 4.8.0 Description: A cross-site scripting issue allows remote attackers to inject JavaScript code. The issue is exploited via the "webmaster-tools.php" endpoint, specifically through the to time parameter. Recommendations: F...

4.8CVSS4.8AI score0.00755EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2021/03/25 12:0 a.m.8 views

SEO Panel 跨站脚本漏洞

SEO Panel is a free, open source SEO optimization software. A cross-site scripting vulnerability exists in SEO Panel version 4.8.0. An attacker can exploit this vulnerability to inject JavaScript via the reporttype parameter in archive.php...

4.8CVSS5.3AI score0.00755EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2021/03/25 12:0 a.m.11 views

PT-2021-18023 · Seo Panel · Seo Panel

Name of the Vulnerable Software and Affected Versions: SEO Panel version 4.8.0 Description: A cross-site scripting issue allows remote attackers to inject JavaScript via the archive.php file in the report type parameter. Recommendations: For SEO Panel version 4.8.0, consider restricting access to...

4.8CVSS4.9AI score0.00755EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2021/03/25 12:0 a.m.8 views

SEO Panel 跨站脚本漏洞

SEO Panel is a free, open source SEO optimization software. A cross-site scripting vulnerability exists in SEO Panel version 4.8.0. The vulnerability can be exploited to inject JavaScript via the type parameter in archive.php...

4.8CVSS5.2AI score0.00828EPSS
SaveExploits1References2
OSV
OSV
added 2021/03/24 3:15 p.m.22 views

PYSEC-2021-889

A stored cross-site scripting XSS vulnerability in Plone CMS 5.2.3 exists in site-controlpanel via the "form.widgets.sitetitle" parameter...

5.4CVSS5.2AI score0.00762EPSS
SaveExploits1References2
PyPA
PyPA
added 2021/03/24 3:15 p.m.9 views

PYSEC-2021-889

A stored cross-site scripting XSS vulnerability in Plone CMS 5.2.3 exists in site-controlpanel via the "form.widgets.sitetitle" parameter...

5.4CVSS5.8AI score0.00762EPSS
SaveExploits1References5Affected Software1
WPVulnDB
WPVulnDB
added 2021/03/23 12:0 a.m.23 views

GiveWP < 2.10.0 - Reflected Cross Site Scripting (XSS)

The plugin was affected by a reflected Cross-Site Scripting vulnerability inside of the administration panel, via the 's' GET parameter on the Donors page. PoC...

4.3CVSS1.6AI score0.0137EPSS
SaveExploits4References1Affected Software1
OSV
OSV
added 2021/03/22 3:15 p.m.9 views

CVE-2021-27308

A cross-site scripting XSS vulnerability in the admin login panel in 4images version 1.8 allows remote attackers to inject JavaScript via the "redirect" parameter...

4.8CVSS5.8AI score0.01994EPSS
SaveExploits4References2
NVD
NVD
added 2021/03/22 3:15 p.m.23 views

CVE-2021-27308

A cross-site scripting XSS vulnerability in the admin login panel in 4images version 1.8 allows remote attackers to inject JavaScript via the "redirect" parameter...

4.8CVSS0.01994EPSS
SaveExploits4References2
ATTACKERKB
ATTACKERKB
added 2021/03/22 3:15 p.m.6 views

CVE-2021-27308

A cross-site scripting XSS vulnerability in the admin login panel in 4images version 1.8 allows remote attackers to inject JavaScript via the "redirect" parameter...

4.8CVSS5AI score0.01994EPSS
SaveExploits4References3
CVE
CVE
added 2021/03/22 2:49 p.m.121 views

CVE-2021-27308

CVE-2021-27308 concerns 4images v1.8 with a cross-site scripting (XSS) in the admin login panel, exploitable via the redirect parameter. The underlying issue is insufficient input handling on the redirect field, allowing an attacker to inject JavaScript. Documents also reference public exploits/e...

4.8CVSS4.8AI score0.01994EPSS
SaveExploits4References2Affected Software1
Fedora
Fedora
added 2021/03/20 12:21 a.m.26 views

[SECURITY] Fedora 34 Update: gnome-desktop3-40~rc-1.fc34

gnome-desktop contains the libgnome-desktop library as well as a data file that exports the "GNOME" version to the Settings Details panel. The libgnome-desktop library provides API shared by several applications on the desktop, but that cannot live in the platform for various reasons. There is no...

5.5CVSS2.7AI score0.00639EPSS
SaveExploits1
Fedora
Fedora
added 2021/03/20 12:20 a.m.28 views

[SECURITY] Fedora 34 Update: plasma-firewall-5.21.3-1.fc34

Control Panel for your system firewall...

7.5CVSS2.1AI score0.01563EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2021/03/20 12:0 a.m.14 views

Fedora: Security Advisory for plasma-firewall (FEDORA-2021-85c9774673)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.6AI score0.01563EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/03/19 12:0 a.m.8 views

SEO Panel Temporal SQL Blind Betting Vulnerability

SEO Panel is a free, open source SEO optimization software. A temporal SQL blind injection vulnerability exists in the ordercol parameter in archive.php in Seo Panel version 4.8.0. An attacker can exploit this vulnerability to retrieve all databases...

7.2CVSS7.4AI score0.10672EPSS
SaveExploits4References1
CNVD
CNVD
added 2021/03/19 12:0 a.m.11 views

Seo Panel Cross-Site Scripting Vulnerability (CNVD-2021-22150)

SEO Panel is a free, open source SEO optimization software. A cross-site scripting vulnerability exists in Seo Panel 4.8.0. A remote attacker can exploit this vulnerability to inject JavaScript via the settings.php category parameter...

4.8CVSS5.9AI score0.01871EPSS
SaveExploits4References1
Rows per page
Query Builder