Lucene search
+L

2030 matches found

CNNVD
CNNVD
•added 2025/09/03 12:00 a.m.•11 views

WordPress plugin LTL Freight Quotes – Day & Ross Edition 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

7.2CVSS6.7AI score0.00379EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/03 12:00 a.m.•12 views

WordPress plugin LTL Freight Quotes – Daylight Edition 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

7.2CVSS6.8AI score0.00379EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/03 12:00 a.m.•13 views

PT-2025-35772

Name of the Vulnerable Software and Affected Versions: LTL Freight Quotes - TQL Edition versions n/a through 1.2.6 Description: Deserialization of untrusted data in LTL Freight Quotes - TQL Edition allows for object injection. Recommendations: At the moment, there is no information about a newer...

7.2CVSS6.3AI score0.00379EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/03 12:00 a.m.•5 views

CVE-2025-58642: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in enituretechnology LTL Freight Quotes – Day & Ross Edition ltl-freight-quotes-day-ross-edition allows Object Injection.This issue affects LTL Freight Quotes – Day & Ross Edition: from n/a through = 2.1.11...

7.2CVSS5.8AI score0.00379EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/03 12:00 a.m.•3 views

CVE-2025-58643: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in enituretechnology LTL Freight Quotes – Daylight Edition ltl-freight-quotes-daylight-edition allows Object Injection.This issue affects LTL Freight Quotes – Daylight Edition: from n/a through = 2.2.7...

7.2CVSS5.8AI score0.00379EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/03 12:00 a.m.•5 views

CVE-2025-58644: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in enituretechnology LTL Freight Quotes - TQL Edition ltl-freight-quotes-tql-edition allows Object Injection.This issue affects LTL Freight Quotes - TQL Edition: from n/a through = 1.2.6...

7.2CVSS5.8AI score0.00379EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/03 12:00 a.m.•11 views

WordPress plugin LTL Freight Quotes - TQL Edition 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

7.2CVSS6.8AI score0.00379EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/30 6:18 p.m.•20 views

CVE-2025-58218

Deserialization of Untrusted Data vulnerability in enituretechnology Small Package Quotes – USPS Edition small-package-quotes-usps-edition allows Object Injection.This issue affects Small Package Quotes – USPS Edition: from n/a through = 1.3.9...

7.2CVSS5.9AI score0.00402EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/30 6:17 p.m.•13 views

CVE-2025-53220

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in XmasB XmasB Quotes xmasb-quotes allows Reflected XSS.This issue affects XmasB Quotes: from n/a through = 1.6.1...

7.1CVSS5.9AI score0.00228EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/28 1:16 p.m.•13 views

CVE-2025-53220

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in XmasB XmasB Quotes xmasb-quotes allows Reflected XSS.This issue affects XmasB Quotes: from n/a through = 1.6.1...

7.1CVSS0.00228EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/28 12:37 p.m.•22 views

CVE-2025-53220 WordPress XmasB Quotes Plugin <= 1.6.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in XmasB XmasB Quotes xmasb-quotes allows Reflected XSS.This issue affects XmasB Quotes: from n/a through = 1.6.1...

7.1CVSS0.00228EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/28 12:37 p.m.•8 views

CVE-2025-53220 WordPress XmasB Quotes Plugin <= 1.6.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in XmasB XmasB Quotes allows Reflected XSS. This issue affects XmasB Quotes: from n/a through 1.6.1...

7.1CVSS5.8AI score0.00228EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/28 12:37 p.m.•35 views

CVE-2025-53220

XmasB Quotes (WordPress) has a reflected XSS in versions up to 1.6.1 due to improper input neutralization during web page generation. Base CVSS 3.1 score 7.1 (HIGH). The remediation is to update to a version later than 1.6.1 (1.6.2+ or patched release). No exploit details or in-the-wild status ar...

7.1CVSS5.9AI score0.00228EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/28 12:00 a.m.•10 views

PT-2025-35044

Name of the Vulnerable Software and Affected Versions: XmasB Quotes versions through 1.6.1 Description: The software contains a reflected cross-site scripting XSS issue due to improper neutralization of input during web page generation. Recommendations: Update to a version later than 1.6.1...

7.1CVSS5.5AI score0.00228EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/28 12:00 a.m.•3 views

CVE-2025-53220: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in XmasB XmasB Quotes xmasb-quotes allows Reflected XSS.This issue affects XmasB Quotes: from n/a through = 1.6.1...

7.1CVSS5.8AI score0.00228EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/28 12:00 a.m.•13 views

WordPress plugin XmasB Quotes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

7.1CVSS5.9AI score0.00228EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/08/27 7:08 p.m.•19 views

WordPress Small Package Quotes – USPS Edition Plugin <= 1.3.9 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Drew / mcdruid in WordPress Plugin Small Package Quotes – USPS Edition versions = 1.3.9...

7.2CVSS7AI score0.00402EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/08/27 6:15 p.m.•14 views

CVE-2025-58218

Deserialization of Untrusted Data vulnerability in enituretechnology Small Package Quotes – USPS Edition small-package-quotes-usps-edition allows Object Injection.This issue affects Small Package Quotes – USPS Edition: from n/a through = 1.3.9...

7.2CVSS0.00402EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/27 5:45 p.m.•26 views

CVE-2025-58218 WordPress Small Package Quotes – USPS Edition Plugin <= 1.3.9 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in enituretechnology Small Package Quotes – USPS Edition small-package-quotes-usps-edition allows Object Injection.This issue affects Small Package Quotes – USPS Edition: from n/a through = 1.3.9...

7.2CVSS0.00402EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/27 5:45 p.m.•35 views

CVE-2025-58218

CVE-2025-58218 describes a Deserialization of Untrusted Data vulnerability in the WordPress plugin Small Package Quotes – USPS Edition (enituretechnology) affecting versions n/a through 1.3.9. The issue is described as PHP Object Injection via untrusted data deserialization, leading to potential ...

7.2CVSS5.9AI score0.00402EPSS
SaveExploits0References1
Rows per page
Query Builder