Lucene search
+L

598 matches found

attackerkb
attackerkb
•added 2021/12/21 9:15 a.m.•11 views

CVE-2021-24941

The Popups, Welcome Bar, Optins and Lead Generation Plugin WordPress plugin before 2.0.5 does not sanitise and escape the messageid parameter of the getmessageactionrow AJAX action before outputting it back in an attribute, leading to a reflected Cross-Site Scripting issue...

6.1CVSS6.3AI score0.008EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/21 12:00 a.m.•3 views

CVE-2021-24941: Improper Neutralization of Input During Web Page Generation

The Popups, Welcome Bar, Optins and Lead Generation Plugin WordPress plugin before 2.0.5 does not sanitise and escape the messageid parameter of the getmessageactionrow AJAX action before outputting it back in an attribute, leading to a reflected Cross-Site Scripting issue...

6.1CVSS5.9AI score0.008EPSS
SaveExploits2References2
OSV
OSV
•added 2021/11/29 7:15 p.m.•15 views

CVE-2021-44201

Cross-site scripting XSS was possible in notification pop-ups. The following products are affected: Acronis Cyber Protect 15 Windows, Linux before build 28035...

6.1CVSS5.3AI score0.00581EPSS
SaveExploits0References1
OSV
OSV
•added 2021/11/08 6:15 p.m.•17 views

CVE-2021-24631

The Unlimited PopUps WordPress plugin through 4.5.3 does not sanitise or escape the did GET parameter before using it in a SQL statement, available to users as low as editor, leading to an authenticated SQL Injection...

8.8CVSS5.8AI score0.01567EPSS
SaveExploits2References2
NVD
NVD
•added 2021/11/08 6:15 p.m.•24 views

CVE-2021-24631

The Unlimited PopUps WordPress plugin through 4.5.3 does not sanitise or escape the did GET parameter before using it in a SQL statement, available to users as low as editor, leading to an authenticated SQL Injection...

8.8CVSS0.01567EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2021/11/08 6:15 p.m.•8 views

CVE-2021-24631

The Unlimited PopUps WordPress plugin through 4.5.3 does not sanitise or escape the did GET parameter before using it in a SQL statement, available to users as low as editor, leading to an authenticated SQL Injection...

8.8CVSS7.3AI score0.01567EPSS
SaveExploits2References3
Prion
Prion
•added 2021/11/08 6:15 p.m.•23 views

Sql injection

The Unlimited PopUps WordPress plugin through 4.5.3 does not sanitise or escape the did GET parameter before using it in a SQL statement, available to users as low as editor, leading to an authenticated SQL Injection...

6.5CVSS8.8AI score0.01567EPSS
SaveExploits2References2Affected Software1
CVE
CVE
•added 2021/11/08 5:34 p.m.•62 views

CVE-2021-24631

The CVE-2021-24631 entry corresponds to a SQL Injection in the WordPress plugin Unlimited PopUps (versions

8.8CVSS8.9AI score0.01567EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
•added 2021/11/08 5:34 p.m.•24 views

CVE-2021-24631 Unlimited PopUps <= 4.5.3 - Author+ SQL Injection

The Unlimited PopUps WordPress plugin through 4.5.3 does not sanitise or escape the did GET parameter before using it in a SQL statement, available to users as low as editor, leading to an authenticated SQL Injection...

9.1AI score0.01567EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/08 12:00 a.m.•3 views

CVE-2021-24631: Improper Neutralization of Special Elements used in an SQL Command

The Unlimited PopUps WordPress plugin through 4.5.3 does not sanitise or escape the did GET parameter before using it in a SQL statement, available to users as low as editor, leading to an authenticated SQL Injection...

8.8CVSS5.9AI score0.01567EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2021/11/08 12:00 a.m.•13 views

WordPress SQL注入漏洞

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress Unlimited PopUps plugin in version 4.5.3 and earlier suffers from a SQL injection vulnerability that...

8.8CVSS6.4AI score0.01567EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
•added 2021/10/27 12:00 a.m.•32 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : firefox Multiple Vulnerabilities (NS-SA-2021-0154)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has firefox packages installed that are affected by multiple vulnerabilities: - In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, resulting in an out of bound...

9.8CVSS8.4AI score0.42327EPSS
SaveExploits5References65
CNNVD
CNNVD
•added 2021/10/19 12:00 a.m.•16 views

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the...

5.4CVSS5.4AI score0.0057EPSS
SaveExploits0References3
WPVulnDB
WPVulnDB
•added 2021/10/07 12:00 a.m.•16 views

Unlimited PopUps <= 4.5.3 - Author+ SQL Injection

The plugin does not sanitise or escape the did GET parameter before using it in a SQL statement, available to users as low as editor, leading to an authenticated SQL Injection PoC https://plugins.trac.wordpress.org/browser/unlimited-popups/trunk/popuplist.phpL16...

8.8CVSS0.1AI score0.01567EPSS
SaveExploits2References1Affected Software1
NVD
NVD
•added 2021/06/24 2:15 p.m.•17 views

CVE-2021-29962

Firefox for Android would become unstable and hard-to-recover when a website opened too many popups. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 89...

4.3CVSS0.00745EPSS
SaveExploits0References2
OSV
OSV
•added 2021/06/24 2:15 p.m.•9 views

CVE-2021-29962

Firefox for Android would become unstable and hard-to-recover when a website opened too many popups. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 89...

4.3CVSS6.9AI score0.00745EPSS
SaveExploits0References2
Prion
Prion
•added 2021/06/24 2:15 p.m.•23 views

Hardcoded credentials

Firefox for Android would become unstable and hard-to-recover when a website opened too many popups. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 89...

4.3CVSS4.1AI score0.00745EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
•added 2021/06/24 2:15 p.m.•37 views

CVE-2021-29962

Firefox for Android would become unstable and hard-to-recover when a website opened too many popups. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 89...

4.3CVSS6.8AI score0.00745EPSS
SaveExploits0References2
OSV
OSV
•added 2021/06/24 2:15 p.m.•15 views

UBUNTU-CVE-2021-29962

Firefox for Android would become unstable and hard-to-recover when a website opened too many popups. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 89...

4.3CVSS6.1AI score0.00745EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/06/24 2:15 p.m.•11 views

CVE-2021-29962

Firefox for Android would become unstable and hard-to-recover when a website opened too many popups. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 89...

4.3CVSS6.4AI score0.00745EPSS
SaveExploits0References3
Rows per page
Query Builder