Lucene search
+L

3511 matches found

Positive Technologies
Positive Technologies
•added 2024/03/27 12:00 a.m.•12 views

PT-2024-23237 · Unknown · The Prime Slider – Addons For Elementor

Name of the Vulnerable Software and Affected Versions: BdThemes Prime Slider – Addons For Elementor versions 3.13.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means...

6.5CVSS9.1AI score0.00348EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/27 12:00 a.m.•3 views

CVE-2024-30186: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Prime Slider – Addons For Elementor allows Stored XSS.This issue affects Prime Slider – Addons For Elementor: from n/a through 3.13.1...

6.5CVSS5.8AI score0.00348EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/27 12:00 a.m.•16 views

WordPress Plugin Prime Slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.5CVSS7AI score0.00348EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/03/25 12:00 a.m.•15 views

WordPress Prime Slider – Addons For Elementor Plugin <= 3.13.1 is vulnerable to Cross Site Scripting (XSS)

Software Prime Slider – Addons For Elementor Type Plugin Vulnerable versions = 3.13.1 Fixed in 3.13.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30186 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID cecca2643bee Credits Khalid Yusuf...

6.5CVSS6.9AI score0.00348EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2024/03/22 12:00 a.m.•49 views

Siemens SCALANCE, SIMATIC and RUGGEDCOM Products Infinite Loop (CVE-2022-0778)

The BNmodsqrt function in openSSL, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve paramete...

7.5CVSS6.8AI score0.73188EPSS
SaveExploits2References54
Vulnrichment
Vulnrichment
•added 2024/03/21 5:55 p.m.•18 views

CVE-2024-24883 WordPress Prime Slider plugin <= 3.11.10 - Broken Access Control on Duplicate Post vulnerability

Missing Authorization vulnerability in BdThemes Prime Slider – Addons For Elementor.This issue affects Prime Slider – Addons For Elementor: from n/a through 3.11.10...

4.3CVSS6.9AI score0.0035EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/21 5:55 p.m.•33 views

CVE-2024-24883 WordPress Prime Slider plugin <= 3.11.10 - Broken Access Control on Duplicate Post vulnerability

Missing Authorization vulnerability in BdThemes Prime Slider – Addons For Elementor.This issue affects Prime Slider – Addons For Elementor: from n/a through 3.11.10...

4.3CVSS5AI score0.0035EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/21 12:00 a.m.•3 views

CVE-2024-24883: Missing Authorization

Missing Authorization vulnerability in BdThemes Prime Slider – Addons For Elementor.This issue affects Prime Slider – Addons For Elementor: from n/a through 3.11.10...

4.3CVSS5.8AI score0.0035EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/15 12:00 a.m.•18 views

PT-2024-7023 · Intel · Intel Quartus Prime Pro Edition Design

Name of the Vulnerable Software and Affected Versions: IntelR QuartusR Prime Pro Edition Design Software versions prior to 24.1 Description: The issue is related to an uncontrolled search path in the IntelR QuartusR Prime Pro Edition Design Software. This may allow an authenticated user to...

7.8CVSS7.4AI score0.0015EPSS
SaveExploits0References6
OSV
OSV
•added 2024/03/13 2:15 p.m.•10 views

CVE-2024-1508

The Prime Slider – Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'settings'titletags'' attribute of the Mercury widget in all versions up to, and including, 3.13.2 due to insufficient input sanitization and output escaping. This makes it possible f...

5.4CVSS5.9AI score0.00335EPSS
SaveExploits0References2
OSV
OSV
•added 2024/03/13 2:15 p.m.•14 views

CVE-2024-1507

The Prime Slider – Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titletags' attribute of the Rubix widget in all versions up to, and including, 3.13.2 due to insufficient input sanitization and output escaping. This makes it possible for...

5.4CVSS7.4AI score0.00434EPSS
SaveExploits0References2
Prion
Prion
•added 2024/03/13 2:15 p.m.•50 views

Cross site scripting

The Prime Slider – Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'settings'titletags'' attribute of the Mercury widget in all versions up to, and including, 3.13.2 due to insufficient input sanitization and output escaping. This makes it possible f...

5.5CVSS5.7AI score0.00335EPSS
SaveExploits0References2
CVE
CVE
•added 2024/03/13 1:52 p.m.•60 views

CVE-2024-1508

CVE-2024-1508 describes a stored cross-site scripting flaw in the Prime Slider – Addons For Elementor (WordPress) plugin, affecting all versions up to 3.13.2. The vulnerability arises in the Mercury widget via the settings['title_tags'] attribute due to insufficient input sanitization and output ...

6.4CVSS5.8AI score0.00335EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/13 12:00 a.m.•5 views

CVE-2024-1507: Improper Neutralization of Input During Web Page Generation

The Prime Slider – Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titletags' attribute of the Rubix widget in all versions up to, and including, 3.13.3 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS6AI score0.00434EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2024/03/13 12:00 a.m.•14 views

WordPress Prime Slider – Addons For Elementor Plugin <= 3.13.2 is vulnerable to Cross Site Scripting (XSS)

Software Prime Slider – Addons For Elementor Type Plugin Vulnerable versions = 3.13.2 Fixed in 3.13.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1507 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID fb8355455b6b Credits...

6.4CVSS5.7AI score0.00434EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
•added 2024/03/13 12:00 a.m.•12 views

WordPress Plugin Prime Slider Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.4CVSS5.9AI score0.00335EPSS
SaveExploits0References3
WPVulnDB
WPVulnDB
•added 2024/03/13 12:00 a.m.•23 views

Prime Slider – Addons For Elementor < 3.13.3 - Contributor+ Stored Cross-Site Scripting via Mercury Widget

Description The plugin is vulnerable to Stored Cross-Site Scripting via the 'settings'titletags'' attribute of the Mercury widget in all versions up to, and including, 3.13.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS5.8AI score0.00335EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2024/03/13 12:00 a.m.•12 views

WordPress Plugin Prime Slider Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.4CVSS6.1AI score0.00434EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/03/13 12:00 a.m.•22 views

PT-2024-18100 · WordPress · The Prime Slider – Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Prime Slider – Addons For Elementor plugin for WordPress versions up to, and including, 3.13.2 Description: The issue is related to Stored Cross-Site Scripting via the title tags attribute of the Rubix widget due to insufficient input...

6.4CVSS8AI score0.00434EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/13 12:00 a.m.•2 views

CVE-2024-1508: Improper Neutralization of Input During Web Page Generation

The Prime Slider – Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'settings'titletags'' attribute of the Mercury widget in all versions up to, and including, 3.13.2 due to insufficient input sanitization and output escaping. This makes it possible f...

6.4CVSS6AI score0.00335EPSS
SaveExploits0References3
Rows per page
Query Builder