Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-44088

Malicious code in bioql PyPI...

6.4CVSS6.5AI score0.00515EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 8:44 a.m.1 views

CVE-2024-4473

The Sydney Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the "aThemes: Portfolio" widget in all versions up to, and including, 1.31 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS6AI score0.00515EPSS
Exploits0References1
OSV
OSV
added 2024/05/14 4:17 p.m.1 views

CVE-2024-4473

The Sydney Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the "aThemes: Portfolio" widget in all versions up to, and including, 1.31 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

5.4CVSS5.9AI score0.00515EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/05/14 12:49 p.m.13 views

CVE-2024-4473 Sydney Toolbox <= 1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via aThemes: Portfolio Widget

The Sydney Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the "aThemes: Portfolio" widget in all versions up to, and including, 1.31 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.8AI score0.00515EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/05/14 1:32 a.m.2 views

WordPress Sydney Toolbox plugin <= 1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via aThemes: Portfolio Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via aThemes: Portfolio Widget vulnerability discovered by Ngô Thiên An ancorn in WordPress Plugin Sydney Toolbox versions = 1.31...

6.4CVSS5.8AI score0.00515EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/05/14 12:0 a.m.1 views

WordPress plugin Sydney Toolbox 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

6.4CVSS6.2AI score0.00515EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/05/14 12:0 a.m.2 views

PT-2024-31227 · WordPress · Sydney Toolbox

Name of the Vulnerable Software and Affected Versions: Sydney Toolbox plugin for WordPress versions up to, and including, 1.31 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the "aThemes: Portfolio" widget, allowing...

6.4CVSS6.9AI score0.00515EPSS
Exploits0References5
Rows per page
Query Builder