Lucene search
+L

2101 matches found

NVD
NVD
•added 2023/08/14 2:15 p.m.•57 views

CVE-2023-29097

Auth. author+ Stored Cross-Site Scripting XSS vulnerability in a3rev Software a3 Portfolio plugin = 3.1.0 versions...

5.9CVSS5.4AI score0.00369EPSS
SaveExploits0References1
Prion
Prion
•added 2023/08/14 2:15 p.m.•36 views

Cross site scripting

Auth. author+ Stored Cross-Site Scripting XSS vulnerability in a3rev Software a3 Portfolio plugin = 3.1.0 versions...

4.3CVSS4.8AI score0.00369EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/08/14 1:46 p.m.•17 views

CVE-2023-29097 WordPress a3 Portfolio Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)

Auth. author+ Stored Cross-Site Scripting XSS vulnerability in a3rev Software a3 Portfolio plugin = 3.1.0 versions...

5.9CVSS5.6AI score0.00369EPSS
SaveExploits0References1
CVE
CVE
•added 2023/08/14 1:46 p.m.•66 views

CVE-2023-29097

CVE-2023-29097 is a Stored XSS vulnerability in the WordPress plugin a3 Portfolio (versions

5.9CVSS5AI score0.00369EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/08/14 1:46 p.m.•52 views

CVE-2023-29097 WordPress a3 Portfolio Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)

Auth. author+ Stored Cross-Site Scripting XSS vulnerability in a3rev Software a3 Portfolio plugin = 3.1.0 versions...

5.9CVSS5.5AI score0.00369EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/08/14 12:00 a.m.•17 views

WordPress plugin a3 Portfolio cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6AI score0.00369EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/08/14 12:00 a.m.•21 views

PT-2023-22145 · Unknown · A3 Portfolio

Name of the Vulnerable Software and Affected Versions: a3 Portfolio plugin versions 3.1.0 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects authenticated users with author or higher privileges. This vulnerability allows an attacker to...

5.9CVSS5.2AI score0.00369EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/14 12:00 a.m.•7 views

CVE-2023-29097: Improper Neutralization of Input During Web Page Generation

Auth. author+ Stored Cross-Site Scripting XSS vulnerability in a3rev Software a3 Portfolio plugin = 3.1.0 versions...

5.9CVSS6.6AI score0.00369EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2023/08/11 12:00 a.m.•19 views

WordPress Portfolio and Projects Plugin <= 1.3.7 is vulnerable to Broken Access Control

Software Portfolio and Projects Type Plugin Vulnerable versions = 1.3.7 Fixed in 1.3.8 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-39995 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 632ef93c7f63 Credits Cat Required privilege...

6.3AI score0.0046EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2023/07/19 12:00 a.m.•8 views

WordPress Easy Photography Portfolio Plugin <= 1.4.8 is vulnerable to Cross Site Scripting (XSS)

Software Easy Photography Portfolio Type Plugin Vulnerable versions = 1.4.8 Fixed in 1.4.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 0b3d61318ada Credits Rafie Muhammad Patchstack...

6.1AI score0.00272EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
•added 2023/07/18 12:00 a.m.•13 views

WordPress Post Grid, Image Gallery & Portfolio for Elementor | PowerFolio Plugin < 3.0.3 is vulnerable to Cross Site Scripting (XSS)

Software Post Grid, Image Gallery & Portfolio for Elementor | PowerFolio Type Plugin Vulnerable versions 3.0.3 Fixed in 3.0.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID...

6.3AI score0.00272EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
•added 2023/07/18 12:00 a.m.•9 views

WordPress Cryptocurrency Portfolio Tracker Plugin <= 0.0.17 is vulnerable to Cross Site Scripting (XSS)

Software Cryptocurrency Portfolio Tracker Type Plugin Vulnerable versions = 0.0.17 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 21f6f43dfd2a Credits Rafie Muhammad...

6.2AI score0.00272EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2023/07/18 12:00 a.m.•10 views

WordPress JDs Portfolio Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)

Software JDs Portfolio Type Plugin Vulnerable versions = 2.1.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID bee9b89c6a44 Credits Rafie Muhammad Patchstack Required...

6.8AI score0.00272EPSS
SaveExploits0References2Affected Software1
Akamai Blog
Akamai Blog
•added 2023/06/21 9:00 a.m.•25 views

Akamai Named a Leader in IDC MarketScape for Network Edge Security as a Service

Akamai was named a Leader in the IDC MarketScape for delivering cloud security without performance trade-offs via our mature application security portfolio...

7AI score
SaveExploits0
NVD
NVD
•added 2023/05/28 1:15 p.m.•26 views

CVE-2014-125101

A vulnerability classified as critical has been found in Portfolio Gallery Plugin up to 1.1.8 on WordPress. This affects an unknown part. The manipulation leads to sql injection. It is possible to initiate the attack remotely. Upgrading to version 1.1.9 is able to address this issue. The identifi...

9.8CVSS7.5AI score0.00707EPSS
SaveExploits0References3
Prion
Prion
•added 2023/05/28 1:15 p.m.•25 views

Sql injection

A vulnerability classified as critical has been found in Portfolio Gallery Plugin up to 1.1.8 on WordPress. This affects an unknown part. The manipulation leads to sql injection. It is possible to initiate the attack remotely. Upgrading to version 1.1.9 is able to address this issue. The identifi...

7.5CVSS7.8AI score0.00707EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2023/05/28 12:31 p.m.•31 views

CVE-2014-125101 Portfolio Gallery Plugin sql injection

A vulnerability classified as critical has been found in Portfolio Gallery Plugin up to 1.1.8 on WordPress. This affects an unknown part. The manipulation leads to sql injection. It is possible to initiate the attack remotely. Upgrading to version 1.1.9 is able to address this issue. The identifi...

6.5CVSS10AI score0.00707EPSS
SaveExploits0References3
CVE
CVE
•added 2023/05/28 12:31 p.m.•63 views

CVE-2014-125101

The CVE-2014-125101 entry concerns the Portfolio Gallery Plugin for WordPress, affected versions up to 1.1.8. A SQL injection vulnerability exists in an unspecified component/part, which can be exploited remotely. Remediation is to upgrade to version 1.1.9, with patch identifier 58ed88243e17df766...

9.8CVSS8.4AI score0.00707EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2023/05/28 12:31 p.m.•3 views

CVE-2014-125101

A vulnerability classified as critical has been found in Portfolio Gallery Plugin up to 1.1.8 on WordPress. This affects an unknown part. The manipulation leads to sql injection. It is possible to initiate the attack remotely. Upgrading to version 1.1.9 is able to address this issue. The identifi...

9.8CVSS0.00707EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/05/28 12:00 a.m.•17 views

WordPress plugin Portfolio Gallery SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

9.8CVSS7.2AI score0.00707EPSS
SaveExploits0References4
Rows per page
Query Builder