Lucene search
+L

433 matches found

CVE
CVE
•added 2024/07/22 9:06 a.m.•83 views

CVE-2024-37257

CVE-2024-37257 describes a Reflected XSS in Permalink Manager Lite (WordPress plugin) affecting versions up to 2.4.3.3. The vulnerability is due to improper neutralization of input during web page generation. Connected sources note the vulnerability is patched, but the exact fixed version is not ...

7.1CVSS7AI score0.00308EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/07/22 9:06 a.m.•29 views

CVE-2024-37257 WordPress Permalink Manager Lite plugin <= 2.4.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Maciej Bis Permalink Manager Lite allows Reflected XSS.This issue affects Permalink Manager Lite: from n/a through 2.4.3.3...

7.1CVSS7AI score0.00308EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/07/22 9:06 a.m.•41 views

CVE-2024-37257 WordPress Permalink Manager Lite plugin <= 2.4.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Maciej Bis Permalink Manager Lite allows Reflected XSS.This issue affects Permalink Manager Lite: from n/a through 2.4.3.3...

7.1CVSS0.00308EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/22 12:00 a.m.•2 views

CVE-2024-37257: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Maciej Bis Permalink Manager Lite allows Reflected XSS.This issue affects Permalink Manager Lite: from n/a through 2.4.3.3...

7.1CVSS5.8AI score0.00308EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/07/22 12:00 a.m.•20 views

PT-2024-27421 · Unknown · Permalink Manager Lite

Name of the Vulnerable Software and Affected Versions: Permalink Manager Lite versions 2.4.3.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For...

7.1CVSS6.5AI score0.00308EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2024/06/27 10:14 a.m.•15 views

WordPress Permalink Manager Lite plugin <= 2.4.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Permalink Manager Lite versions = 2.4.3.3...

7.1CVSS6.1AI score0.00308EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/06/27 12:00 a.m.•24 views

WordPress Permalink Manager Lite Plugin <= 2.4.3.3 is vulnerable to Cross Site Scripting (XSS)

Software Permalink Manager Lite Type Plugin Vulnerable versions = 2.4.3.3 Fixed in 2.4.3.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37257 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e3ec5eb6c45f Credits Rafie Muhammad...

7.1CVSS6.8AI score0.00308EPSS
SaveExploits0References2Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:46 p.m.•14 views

Malicious code in active-model-permalink (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
OSV
OSV
•added 2024/06/25 1:46 p.m.•18 views

MAL-2024-6407 Malicious code in active-model-permalink (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
NVD
NVD
•added 2024/05/17 9:15 a.m.•32 views

CVE-2024-27971

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Premmerce Premmerce Permalink Manager for WooCommerce woo-permalink-manager.This issue affects Premmerce Permalink Manager for WooCommerce: from n/a through = 2.3.10...

8.3CVSS8.3AI score0.0146EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/05/17 8:51 a.m.•48 views

CVE-2024-27971 WordPress Premmerce Permalink Manager for WooCommerce plugin <= 2.3.10 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Premmerce Premmerce Permalink Manager for WooCommerce woo-permalink-manager.This issue affects Premmerce Permalink Manager for WooCommerce: from n/a through = 2.3.10...

8.3CVSS8.3AI score0.0146EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/05/17 8:51 a.m.•22 views

CVE-2024-27971 WordPress Premmerce Permalink Manager for WooCommerce plugin <= 2.3.10 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Premmerce Premmerce Permalink Manager for WooCommerce woo-permalink-manager.This issue affects Premmerce Permalink Manager for WooCommerce: from n/a through = 2.3.10...

8.3CVSS7.2AI score0.0146EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/17 12:00 a.m.•2 views

CVE-2024-27971: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Premmerce Premmerce Permalink Manager for WooCommerce woo-permalink-manager.This issue affects Premmerce Permalink Manager for WooCommerce: from n/a through = 2.3.10...

8.3CVSS5.8AI score0.0146EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/17 12:00 a.m.•13 views

WordPress plugin Premmerce Permalink Manager for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.3CVSS8.3AI score0.0146EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/05/17 12:00 a.m.•18 views

PT-2024-22177 · Woocommerce · Premmerce Permalink Manager For Woocommerce

Name of the Vulnerable Software and Affected Versions: Premmerce Permalink Manager for WooCommerce versions prior to 2.3.11 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability. This vulnerability allow...

8.3CVSS9.4AI score0.0146EPSS
SaveExploits0References5
NVD
NVD
•added 2024/04/29 6:15 a.m.•20 views

CVE-2024-33681

Cross-Site Request Forgery CSRF vulnerability in Sandor Kovacs Regenerate post permalink allows Cross-Site Scripting XSS.This issue affects Regenerate post permalink: from n/a through 1.0.3...

7.1CVSS6.7AI score0.00195EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/29 6:01 a.m.•18 views

CVE-2024-33681 WordPress Regenerate post permalink plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) leading to XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Sandor Kovacs Regenerate post permalink allows Cross-Site Scripting XSS.This issue affects Regenerate post permalink: from n/a through 1.0.3...

7.1CVSS6.6AI score0.00195EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/29 6:01 a.m.•75 views

CVE-2024-33681

The CVE-2024-33681 entry concerns the WordPress plugin Regenerate post permalink (versions n/a through 1.0.3). The connected documents describe a CSRF vulnerability that enables Cross-Site Scripting (XSS) due to missing or incorrect nonce validation on a function. Unauthenticated attackers could ...

7.1CVSS5.1AI score0.00195EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/29 12:00 a.m.•2 views

CVE-2024-33681: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Sandor Kovacs Regenerate post permalink allows Cross-Site Scripting XSS.This issue affects Regenerate post permalink: from n/a through 1.0.3...

7.1CVSS5.8AI score0.00195EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/04/29 12:00 a.m.•13 views

WordPress plugin Regenerate post permalink 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Regenerate post permalink...

7.1CVSS6.7AI score0.00195EPSS
SaveExploits0References2
Rows per page
Query Builder