Lucene search
K

20 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 8:46 a.m.5 views

CVE-2025-23758

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pootlepress Pootle button pootle-button allows Reflected XSS.This issue affects Pootle button: from n/a through = 1.2.0...

7.1CVSS7.2AI score0.00232EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2017-7233

Malware in sbrugna...

5.4CVSS5.5AI score0.00196EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-3394

Malicious code in bioql PyPI...

7.1CVSS8.7AI score0.00232EPSS
Exploits0References1
NVD
NVD
added 2025/01/22 3:15 p.m.2 views

CVE-2025-23758

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pootlepress Pootle button pootle-button allows Reflected XSS.This issue affects Pootle button: from n/a through = 1.2.0...

7.1CVSS0.00232EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/22 2:29 p.m.3 views

CVE-2025-23758 WordPress pootle button plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pootlepress Pootle button pootle-button allows Reflected XSS.This issue affects Pootle button: from n/a through = 1.2.0...

7.1CVSS7.2AI score0.00232EPSS
Exploits0References1
CVE
CVE
added 2025/01/22 2:29 p.m.39 views

CVE-2025-23758

CVE-2025-23758 affects the WordPress pootle-button plugin (NotFound Pootle button); vulnerability is a Reflected XSS in the plugin’s input handling, affecting versions up to 1.2.0. Exploitation details are not provided beyond the vulnerability type. Remediation: upgrade to version 1.2.0 or later ...

7.1CVSS7.2AI score0.00232EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/22 2:29 p.m.11 views

CVE-2025-23758 WordPress pootle button plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pootlepress Pootle button pootle-button allows Reflected XSS.This issue affects Pootle button: from n/a through = 1.2.0...

7.1CVSS0.00232EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/01/22 12:0 a.m.2 views

PT-2025-5069 · Unknown · Pootle Button

Name of the Vulnerable Software and Affected Versions: Pootle button versions 1.2.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Reflected XSS in the NotFound Pootle button...

7.1CVSS9AI score0.00232EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/01/22 12:0 a.m.2 views

WordPress plugin Pootle button 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.7AI score0.00232EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/01/16 6:42 p.m.2 views

WordPress pootle button plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Pootle button versions = 1.2.0...

7.1CVSS6.1AI score0.00232EPSS
Exploits0Affected Software1
CNVD
CNVD
added 2017/11/01 12:0 a.m.3 views

WordPress Pootle Button Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Pootle Button plugin is one of the Pootle button plugin. A cross-site scripting vulnerability exists in WordPress...

5.4CVSS6.5AI score0.00196EPSS
Exploits1References1
Prion
Prion
added 2017/10/23 5:29 p.m.19 views

Design/Logic Flaw

The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assetsurl parameter in assets/dialog.php, exploitable via wp-admin/admin-ajax.php...

3.5CVSS5.3AI score0.00196EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2017/10/23 5:29 p.m.10 views

CVE-2017-15811

The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assetsurl parameter in assets/dialog.php, exploitable via wp-admin/admin-ajax.php...

5.4CVSS5.4AI score0.00196EPSS
Exploits1References3
OSV
OSV
added 2017/10/23 5:29 p.m.1 views

CVE-2017-15811

The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assetsurl parameter in assets/dialog.php, exploitable via wp-admin/admin-ajax.php...

5.4CVSS5.8AI score0.00196EPSS
Exploits1References3
Cvelist
Cvelist
added 2017/10/23 5:0 p.m.12 views

CVE-2017-15811

The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assetsurl parameter in assets/dialog.php, exploitable via wp-admin/admin-ajax.php...

5.4AI score0.00196EPSS
Exploits1References3
CVE
CVE
added 2017/10/23 5:0 p.m.44 views

CVE-2017-15811

The CVE-2017-15811 entry concerns the Pootle Button plugin for WordPress, affecting versions before 1.2.0 with a Cross-Site Scripting (XSS) flaw. The vulnerability is triggered by the assets_url parameter in assets/dialog.php and is exploitable via wp-admin/admin-ajax.php, allowing an attacker to...

5.4CVSS5.3AI score0.00196EPSS
Exploits1References3Affected Software1
Patchstack
Patchstack
added 2017/10/13 12:0 a.m.6 views

WordPress Pootle button plugin <=1.1.1 - Authenticated Cross-Site Scripting (XSS) vulnerability

Authenticated Cross-Site Scripting XSS vulnerability found in WordPress Pootle button plugin versions =1.1.1. Solution Update the WordPress Pootle button plugin to the latest available version at least version 1.2.0...

2.3AI score
Exploits0References1Affected Software1
0day.today
0day.today
added 2017/10/12 12:0 a.m.25 views

WordPress Pootle Button 1.1.1 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Credit Ricardo Sanchez Vulnerable Pootle button plugin 1.1.1 Pootle button plugin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...

7.1AI score
Exploits0
wpexploit
wpexploit
added 2017/10/12 12:0 a.m.15 views

pootle button <= 1.1.1 - Authenticated Cross-Site Scripting (XSS)

The pootle button WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability. http://example.com/wp-admin/admin-ajax.php?action=pbtndialog&assetsurl=%22%3E%3Cimg%20src=x%20onerror=alert1%3E...

3.5CVSS1.5AI score0.00196EPSS
Exploits1References2
Packet Storm
Packet Storm
added 2017/10/12 12:0 a.m.30 views

WordPress Pootle Button 1.1.1 Cross Site Scripting

Class Input Validation Error Remote Yes Reflected Yes Credit Ricardo Sanchez Vulnerable Pootle button plugin 1.1.1 Pootle button plugin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...

7AI score
Exploits0
Rows per page
Query Builder