Lucene search
+L

20875 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2023/10/02 5:31 a.m.4 views

Malicious code in terminal-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc720bba161c938dd6d8b8b6a31e573db548b9243985c5462dda2dc486732527 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2023/10/02 12:00 a.m.13 views

CVE-2023-43267

A cross-site scripting XSS vulnerability in the publish article function of emlog pro v2.1.14 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title field...

5.9AI score
SaveExploits0References4
CVE
CVE
added 2023/10/02 12:00 a.m.70 views

CVE-2023-43267

The CVE-2023-43267 entry describes a cross-site scripting (XSS) vulnerability in the publish article function of emlog pro v2.1.14, where an attacker can inject a crafted payload into the title field to execute arbitrary web scripts or HTML. Connected sources corroborate the affected software/ver...

5.4CVSS5.2AI score0.00332EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/10/02 12:00 a.m.36 views

CVE-2023-43267

A cross-site scripting XSS vulnerability in the publish article function of emlog pro v2.1.14 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title field...

5.4AI score0.00332EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/10/02 12:00 a.m.11 views

CVE-2023-43267

A cross-site scripting XSS vulnerability in the publish article function of emlog pro v2.1.14 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title field...

5.8AI score0.00332EPSS
SaveExploits0References2
OSV
OSV
added 2023/09/29 2:15 p.m.7 views

CVE-2023-41663

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Giovambattista Fazioli WP Bannerize Pro plugin = 1.6.9 versions...

6.1CVSS7.3AI score0.00331EPSS
SaveExploits0References1
NVD
NVD
added 2023/09/29 2:15 p.m.33 views

CVE-2023-41663

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Giovambattista Fazioli WP Bannerize Pro plugin = 1.6.9 versions...

7.1CVSS6.2AI score0.00331EPSS
SaveExploits0References1
CVE
CVE
added 2023/09/29 1:43 p.m.77 views

CVE-2023-41663

CVE-2023-41663 – WordPress WP Bannerize Pro : Unauthenticated reflected Cross-Site Scripting (XSS) in Giovambattista Fazioli WP Bannerize Pro plugin versions

7.1CVSS6.1AI score0.00331EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/29 1:43 p.m.13 views

CVE-2023-41663 WordPress WP Bannerize Pro Plugin <= 1.6.9 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Giovambattista Fazioli WP Bannerize Pro plugin = 1.6.9 versions...

7.1CVSS6.2AI score0.00331EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/09/29 12:00 a.m.6 views

PT-2023-28749 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: emlog pro version 2.1.14 Description: A cross-site scripting XSS issue in the publish article function allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title field. Recommendations: For emlog p...

5.4CVSS5.3AI score0.00332EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/09/29 12:00 a.m.12 views

WordPress Plugin WP Bannerize Pro Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6AI score0.00331EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
added 2023/09/29 12:00 a.m.18 views

WP Bannerize Pro <= 1.6.9 - Reflected XSS

Description The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS5.7AI score0.00331EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/09/27 3:19 p.m.7 views

CVE-2023-43291

Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php component...

9.8CVSS6.2AI score0.01552EPSS
SaveExploits1References2
NVD
NVD
added 2023/09/27 3:19 p.m.24 views

CVE-2023-43291

Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php component...

9.8CVSS9.6AI score0.01552EPSS
SaveExploits1References1
NVD
NVD
added 2023/09/27 3:19 p.m.22 views

CVE-2023-41237

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Arya Multipurpose Pro theme = 1.0.8 versions...

7.1CVSS6.3AI score0.00351EPSS
SaveExploits0References1
NVD
NVD
added 2023/09/27 3:19 p.m.29 views

CVE-2023-41236

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Happy addons Happy Elementor Addons Pro plugin = 2.8.0 versions...

7.1CVSS6.2AI score0.00351EPSS
SaveExploits0References1
OSV
OSV
added 2023/09/27 3:19 p.m.7 views

CVE-2023-41236

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Happy addons Happy Elementor Addons Pro plugin = 2.8.0 versions...

6.1CVSS7.3AI score0.00351EPSS
SaveExploits0References1
OSV
OSV
added 2023/09/27 3:19 p.m.5 views

CVE-2023-41237

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Arya Multipurpose Pro theme = 1.0.8 versions...

6.1CVSS7.3AI score0.00351EPSS
SaveExploits0References1
OSV
OSV
added 2023/09/27 3:19 p.m.7 views

CVE-2023-41235

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Everest News Pro theme = 1.1.7 versions...

6.1CVSS7.3AI score0.00351EPSS
SaveExploits0References1
NVD
NVD
added 2023/09/27 3:19 p.m.25 views

CVE-2023-41235

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Everest News Pro theme = 1.1.7 versions...

7.1CVSS6.3AI score0.00351EPSS
SaveExploits0References1
Rows per page
Query Builder