Lucene search
+L

246 matches found

OSV
OSV
added 2023/08/14 3:15 p.m.5 views

CVE-2023-30751

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in iControlWP Article Directory Redux plugin = 1.0.2 versions...

4.8CVSS6.6AI score0.00369EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/08/14 2:39 p.m.60 views

CVE-2023-30751 WordPress Article Directory Redux Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in iControlWP Article Directory Redux plugin = 1.0.2 versions...

5.9CVSS5.5AI score0.00369EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/08/14 2:39 p.m.12 views

CVE-2023-30751 WordPress Article Directory Redux Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in iControlWP Article Directory Redux plugin = 1.0.2 versions...

5.9CVSS5.6AI score0.00369EPSS
SaveExploits0References1
CVE
CVE
added 2023/08/14 2:39 p.m.54 views

CVE-2023-30751

CVE-2023-30751 affects the WordPress plugin Article Directory Redux (iControlWP Article Directory Redux) versions ≤ 1.0.2. It is described as an Authenticated Stored XSS vulnerability that an administrator can exploit via the plugin’s input handling. Impact is characterized as low for confidentia...

5.9CVSS5AI score0.00369EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/08/14 12:0 a.m.22 views

PT-2023-22954 · WordPress · Icontrolwp Article Directory Redux

Name of the Vulnerable Software and Affected Versions: iControlWP Article Directory Redux plugin versions 1.0.2 and earlier Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin access can inject malicious scrip...

5.9CVSS5.2AI score0.00369EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/08/14 12:0 a.m.64 views

WordPress plugin article-directory-redux cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6AI score0.00369EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/04/14 12:0 a.m.42 views

WordPress Article Directory Redux Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Article Directory Redux Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-30751 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 1d10759d477b Credits Pavitra Tiwari...

5.9CVSS6AI score0.00369EPSS
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/03/15 2:0 a.m.3 views

Malicious code in cms-ui-redux (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b762909fe644f0cec406dc5042d82e4b93fda0f4259313f2884b3cf4ed92cce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References2
OSV
OSV
added 2023/03/15 2:0 a.m.6 views

MAL-2023-195 Malicious code in cms-ui-redux (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b762909fe644f0cec406dc5042d82e4b93fda0f4259313f2884b3cf4ed92cce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References2
Snyk
Snyk
added 2023/03/14 8:19 a.m.3 views

Malicious Package

Overview cms-ui-redux is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
added 2023/02/21 8:16 a.m.4 views

Malicious Package

Overview tools-access-react-redux is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7.1AI score
SaveExploits0References3
vulnersOsv
vulnersOsv
added 2023/01/24 12:0 p.m.5 views

acari-lib (>=0.1.11 <=0.1.12), acme-rs (>=0.1.0 <=0.2.0) +350 more potentially affected by unknown CVE via buf_redux (>=0.1.3 <=0.8.4)

bufredux CARGO version =0.1.3, =0.1.11, =0.1.0, =0.9.2, =0.5.1, =0.2.0, =0.1.0, =0.0.1, =0.1.5, =0.0.5, =0.0.1, =0.1.0, =1.0.0, =0.26.1, =0.26.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0028...

5.8AI score
SaveExploits0
RustSec
RustSec
added 2023/01/24 12:0 p.m.29 views

buf_redux is Unmaintained

Last release was over three years ago. The maintainers have been unreachable to respond to any issues that may or may not include security issues. The repository is now archived and there is no security policy in place to contact the maintainers otherwise. The safety-undocumented unsafe in the...

6.7AI score
SaveExploits0
OSV
OSV
added 2023/01/24 12:0 p.m.12 views

RUSTSEC-2023-0028 buf_redux is Unmaintained

Last release was over three years ago. The maintainers have been unreachable to respond to any issues that may or may not include security issues. The repository is now archived and there is no security policy in place to contact the maintainers otherwise. The safety-undocumented unsafe in the...

7.3AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/10/20 12:34 a.m.6 views

Malicious code in react-redux-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1317918bed3a26481cc0f2581c7902fde3cb69f75efdf9ab9f4fc365d5abf451 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/10/20 12:34 a.m.5 views

Malicious code in react-redux-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 923626e0b4bdb65be6f322ccc7a88eb917c23f0c7e1a122ae4f8723b0b2959f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/10/20 12:34 a.m.12 views

MAL-2022-5669 Malicious code in react-redux-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 923626e0b4bdb65be6f322ccc7a88eb917c23f0c7e1a122ae4f8723b0b2959f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/10/20 12:34 a.m.13 views

MAL-2022-5670 Malicious code in react-redux-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1317918bed3a26481cc0f2581c7902fde3cb69f75efdf9ab9f4fc365d5abf451 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/08/19 3:55 a.m.5 views

Malicious code in redux-cations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75da2b1d6ce3300bfe7396bf882c7fd061003df2bde7ca6b90287a17b1d7ebfd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/08/19 3:55 a.m.3 views

Malicious code in -redux-forjm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b71391377ccc1bbe5686068baa4134a5f2133e0cf8b132f8df7ad66ee4dd64ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Rows per page
Query Builder