Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-51632

Malicious code in bioql PyPI...

7.1CVSS7AI score0.00403EPSS
Exploits0References1
OSV
OSV
added 2023/11/30 5:15 p.m.2 views

CVE-2023-47521

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Max Bond, AndreSC Q2W3 Post Order allows Reflected XSS.This issue affects Q2W3 Post Order: from n/a through 1.2.8...

6.1CVSS7.3AI score0.00403EPSS
Exploits0References1
NVD
NVD
added 2023/11/30 5:15 p.m.25 views

CVE-2023-47521

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Max Bond, AndreSC Q2W3 Post Order allows Reflected XSS.This issue affects Q2W3 Post Order: from n/a through 1.2.8...

7.1CVSS0.00403EPSS
Exploits0References1
Prion
Prion
added 2023/11/30 5:15 p.m.18 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Max Bond, AndreSC Q2W3 Post Order allows Reflected XSS.This issue affects Q2W3 Post Order: from n/a through 1.2.8...

5.8CVSS7.1AI score0.00403EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/30 4:59 p.m.25 views

CVE-2023-47521 WordPress Q2W3 Post Order Plugin <= 1.2.8 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Max Bond, AndreSC Q2W3 Post Order allows Reflected XSS.This issue affects Q2W3 Post Order: from n/a through 1.2.8...

7.1CVSS7.2AI score0.00403EPSS
Exploits0References1
CVE
CVE
added 2023/11/30 4:59 p.m.77 views

CVE-2023-47521

CVE-2023-47521 affects the WordPress Q2W3 Post Order plugin up to version 1.2.8. It is a Reflected XSS caused by improper input neutralization during web page generation, permitting unauthenticated injection of scripts via crafted requests. Public sources indicate the vulnerability remains unpatc...

7.1CVSS7AI score0.00403EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/11/30 12:0 a.m.4 views

WordPress Plugin Q2W3 Post Order Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

7.1CVSS6AI score0.00403EPSS
Exploits0References1
Patchstack
Patchstack
added 2023/11/07 12:0 a.m.15 views

WordPress Q2W3 Post Order Plugin <= 1.2.8 is vulnerable to Cross Site Scripting (XSS)

Software Q2W3 Post Order Type Plugin Vulnerable versions = 1.2.8 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47521 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID cb5de227d10d Credits Le Ngoc Anh Require...

7.1CVSS5.6AI score0.00403EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder