Lucene search
K

11 matches found

RedhatCVE
RedhatCVE
added 2026/01/01 2:18 p.m.2 views

CVE-2025-62124

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Soli WP Post Signature wp-post-signature allows Stored XSS.This issue affects WP Post Signature: from n/a through = 0.4.1...

5.9CVSS5.9AI score0.00007EPSS
Exploits0References1
NVD
NVD
added 2025/12/31 2:15 p.m.3 views

CVE-2025-62124

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Soli WP Post Signature wp-post-signature allows Stored XSS.This issue affects WP Post Signature: from n/a through = 0.4.1...

5.9CVSS0.00007EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/31 1:37 p.m.3 views

CVE-2025-62124 WordPress WP Post Signature plugin <= 0.4.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Soli WP Post Signature allows Stored XSS.This issue affects WP Post Signature: from n/a through 0.4.1...

5.9CVSS5.6AI score0.00007EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/31 1:37 p.m.23 views

CVE-2025-62124 WordPress WP Post Signature plugin <= 0.4.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Soli WP Post Signature wp-post-signature allows Stored XSS.This issue affects WP Post Signature: from n/a through = 0.4.1...

5.9CVSS0.00007EPSS
Exploits0References1
CVE
CVE
added 2025/12/31 1:37 p.m.4 views

CVE-2025-62124

CVE-2025-62124 affects WP Post Signature (Soli WP Post Signature) up to version 0.4.1. Vulnerability: Improper neutralization of input during web page generation leading to Stored XSS. According to public data, exploitability is NETWORK-based with LOW attack complexity, but requires HIGH privileg...

5.9CVSS5.9AI score0.00007EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/12/31 1:36 p.m.3 views

WordPress WP Post Signature plugin <= 0.4.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nabil Irawan in WordPress Plugin WP Post Signature versions = 0.4.1...

5.9CVSS5.9AI score0.00007EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2025/12/31 12:0 a.m.2 views

WordPress plugin WP Post Signature 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS5.9AI score0.00007EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/31 12:0 a.m.3 views

PT-2025-54331

Name of the Vulnerable Software and Affected Versions Soli WP Post Signature versions through 0.4.1 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, which can lead to Stored Cross-site Scripting XSS. This allows an attacker to inject...

5.9CVSS6.2AI score0.00007EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/11 12:0 a.m.2 views

CVE-2025-59802

Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via OCG. When Optional Content Groups OCG are supported, the state property of an OCG is runtime-only and not included in the digital signature computation buffer. An attacker can leverage JavaScript or PDF triggers to dynamical...

6.3AI score0.0004EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/11 12:0 a.m.2 views

Foxit PDF Reader和Foxit PDF Editor 安全漏洞

Foxit PDF Reader and Foxit PDF Editor are both products of Foxit Corporation of China.Foxit PDF Reader is a PDF reader.Foxit PDF Editor is a PDF editor. A security vulnerability exists in Foxit PDF Reader and Foxit PDF Editor versions prior to 2025.2.1, which originates from a trigger embedded in...

5.3CVSS6.4AI score0.00021EPSS
Exploits0References1
OSV
OSV
added 2023/02/13 8:15 p.m.1 views

CVE-2023-25718

In ConnectWise Control through 22.9.10032 formerly known as ScreenConnect, after an executable file is signed, additional instructions can be added without invalidating the signature, such as instructions that result in offering the end user a different attacker-controlled executable file. It is...

9.8CVSS5.9AI score
Exploits0References5
Rows per page
Query Builder