Lucene search
+L

191 matches found

Nuclei
Nuclei
•added 2026/09/28 2:13 a.m.•58 views

WordPress Simple Link Directory <7.7.2 - SQL injection

WordPress Simple Link Directory plugin before 7.7.2 contains a SQL injection vulnerability. The plugin does not validate and escape the postid parameter before using it in a SQL statement via the qcopdupvoteaction AJAX action, available to unauthenticated and authenticated users. An attacker can...

9.8CVSS8.3AI score0.10825EPSS
SaveExploits2References5
Nuclei
Nuclei
•added 2026/09/28 2:13 a.m.•58 views

Infographic Maker iList < 4.3.8 - SQL Injection

The Infographic Maker WordPress plugin before 4.3.8 does not validate and escape the postid parameter before using it in a SQL statement via the qcldupvoteaction AJAX action available to unauthenticated and authenticated users, leading to an unauthenticated SQL Injection. id: CVE-2022-0747 info:...

9.8CVSS8.2AI score0.14882EPSS
SaveExploits2References5
EUVD
EUVD
•added 2026/07/13 12:35 p.m.•15 views

EUVD-2026-43446

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuantumCloud ChatBot chatbot allows Stored XSS.This issue affects ChatBot: from n/a through = 8.3.7...

7.1CVSS6.1AI score0.00251EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/13 10:16 a.m.•15 views

CVE-2026-57414

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuantumCloud ChatBot for eCommerce WoowBot woowbot-woocommerce-chatbot allows Stored XSS.This issue affects ChatBot for eCommerce WoowBot: from n/a through = 4.6.1...

6.5CVSS0.00224EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/13 10:16 a.m.•15 views

CVE-2026-57363

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuantumCloud ChatBot chatbot allows Stored XSS.This issue affects ChatBot: from n/a through = 8.3.7...

7.1CVSS0.00251EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/13 8:41 a.m.•13 views

EUVD-2026-43486

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuantumCloud ChatBot for eCommerce WoowBot woowbot-woocommerce-chatbot allows Stored XSS.This issue affects ChatBot for eCommerce WoowBot: from n/a through = 4.6.1...

6.5CVSS6.1AI score0.00224EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/13 8:41 a.m.•45 views

CVE-2026-57363 WordPress ChatBot plugin <= 8.3.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuantumCloud ChatBot chatbot allows Stored XSS.This issue affects ChatBot: from n/a through = 8.3.7...

7.1CVSS0.00251EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/13 12:00 a.m.•1 views

CVE-2026-57414: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuantumCloud ChatBot for eCommerce – WoowBot woowbot-woocommerce-chatbot allows Stored XSS.This issue affects ChatBot for eCommerce – WoowBot: from n/a through = 4.6.1...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•28 views

PT-2026-57681

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuantumCloud ChatBot chatbot allows Stored XSS.This issue affects ChatBot: from n/a through = 8.3.7...

7.1CVSS6.1AI score0.00251EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•20 views

PT-2026-57725

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuantumCloud ChatBot for eCommerce WoowBot woowbot-woocommerce-chatbot allows Stored XSS.This issue affects ChatBot for eCommerce WoowBot: from n/a through = 4.6.1...

6.5CVSS6.1AI score0.00224EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/13 12:00 a.m.•1 views

CVE-2026-57710: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in quantumcloud WoowBot Pro Max woowbot-pro-max allows Using Malicious Files.This issue affects WoowBot Pro Max: from n/a through = 14.1.7...

9.9CVSS5.8AI score0.00479EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/13 12:00 a.m.•0 views

CVE-2026-57363: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuantumCloud ChatBot chatbot allows Stored XSS.This issue affects ChatBot: from n/a through = 8.3.7...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/06/17 6:35 p.m.•17 views

EUVD-2024-55632

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in QuantumCloud Conversational Forms for ChatBot allows Path Traversal. This issue affects Conversational Forms for ChatBot: from n/a through 1.1.8...

7.5CVSS5.2AI score0.0043EPSS
SaveExploits0References2
NVD
NVD
•added 2026/06/17 1:19 p.m.•18 views

CVE-2024-32729

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in QuantumCloud Conversational Forms for ChatBot allows Path Traversal. This issue affects Conversational Forms for ChatBot: from n/a through 1.1.8...

7.5CVSS0.0043EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/17 12:00 a.m.•4 views

WordPress Plugin: conversational-forms: CVE-2024-32729: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in QuantumCloud Conversational Forms for ChatBot allows Path Traversal. This issue affects Conversational Forms for ChatBot: from n/a through 1.1.8...

7.5CVSS5.8AI score0.0043EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/03/26 5:03 p.m.•15 views

CVE-2026-32499

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in QuantumCloud ChatBot chatbot allows Blind SQL Injection.This issue affects ChatBot: from n/a through = 7.7.9...

9.3CVSS5.9AI score0.004EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/25 6:31 p.m.•18 views

EUVD-2026-15847

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in QuantumCloud ChatBot chatbot allows Blind SQL Injection.This issue affects ChatBot: from n/a through = 7.7.9...

5.9AI score0.004EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/25 5:17 p.m.•16 views

CVE-2026-32499

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in QuantumCloud ChatBot chatbot allows Blind SQL Injection.This issue affects ChatBot: from n/a through = 7.7.9...

9.3CVSS0.004EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/25 12:00 a.m.•16 views

PT-2026-28013

Name of the Vulnerable Software and Affected Versions QuantumCloud ChatBot versions through 7.7.9 Description A flaw exists in QuantumCloud ChatBot that allows for Blind SQL Injection due to improper neutralization of special elements used in an SQL command. This issue could potentially allow an...

9.3CVSS5.9AI score0.004EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•1 views

CVE-2026-32499: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in QuantumCloud ChatBot chatbot allows Blind SQL Injection.This issue affects ChatBot: from n/a through = 7.7.9...

9.3CVSS5.8AI score0.004EPSS
SaveExploits0References1
Rows per page
Query Builder