Lucene search
+L

6 matches found

Cvelist
Cvelist
added 2026/09/02 6:00 a.m.37 views

CVE-2026-77792 RegistrationMagic < 6.0.9.9 - Unauthenticated Stored XSS via Rating Field

The RegistrationMagic WordPress plugin before 6.0.9.9 does not escape a registration form field value before outputting it in an HTML attribute on an administrative page, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against high privilege users such as admin...

0.00216EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/09/02 6:00 a.m.12 views

CVE-2026-77792 RegistrationMagic < 6.0.9.9 - Unauthenticated Stored XSS via Rating Field

The RegistrationMagic WordPress plugin before 6.0.9.9 does not escape a registration form field value before outputting it in an HTML attribute on an administrative page, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against high privilege users such as admin...

5.9AI score0.00216EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/02 6:00 a.m.17 views

CVE-2026-77792

The RegistrationMagic WordPress plugin (versions before 6.0.9.9 ) contains a Stored Cross-Site Scripting (XSS) vulnerability. The root cause is the failure to escape a registration form field value before outputting it into an HTML attribute on an administrative page. This allows unauthenticated ...

5.9AI score0.00216EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2022/05/13 1:12 a.m.32 views

Moodle multiple cross-site scripting (XSS) vulnerabilities

Multiple cross-site scripting XSS vulnerabilities in the advanced-grading implementation in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted 1...

3.5CVSS5.3AI score0.01749EPSS
SaveExploits0References23Affected Software1
Prion
Prion
added 2014/07/29 11:10 a.m.30 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the advanced-grading implementation in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted 1...

3.5CVSS5.5AI score0.01749EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2014/07/29 10:00 a.m.89 views

CVE-2014-3551

CVE-2014-3551 affects Moodle multiple versions of the advanced-grading rubric component. Vulnerable in 2.3.x up to 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1. Description: XSS via crafted (1) qualification or (2) rating fields in a rubric, exploita...

3.5CVSS5.1AI score0.01749EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder