9612 matches found
CVE-2023-30494
Unauth. Reflected Cross-Site Scripting XSS vulnerability in ImageRecycle ImageRecycle pdf & image compression plugin = 3.1.10 versions...
CVE-2023-39164
CVE-2023-39164: Unauthenticated reflected XSS in Molongui Author Box for Authors, Co-Authors, Multiple Authors and Guest Authors (Molongui plugin 4.6.19. CVE-2023-39164 details and vendor advisories confirm the XSS vuln; no exploit details are provided in the supplied sources.
CVE-2023-39369
StarTrinity Softswitch version 2023-02-16 - Multiple Reflected XSS CWE-79...
CVE-2023-37893
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Chop-Chop Coming Soon Chop Chop plugin = 2.2.4 versions...
CVE-2023-37997
CVE-2023-37997 : Unauthenticated Reflected Cross-Site Scripting vulnerability in the WordPress plugin “Post List With Featured Image” (Dharmesh Patel), affecting versions <= 1.2 (WordPress plugin) and also cited as
CVE-2023-4315
CVE-2023-4315 affects the WordPress plugin “Woo Custom Emails”. The vulnerability is a reflected XSS in the wcemails_edit parameter for versions up to and including 2.2, caused by insufficient input sanitization and output escaping. Exploitation requires user interaction (tricking the user into c...
JVN#60140221: Multiple vulnerabilities in i-PRO VI Web Client
VI Web Client provided by i-PRO Co., Ltd. is Video Insight’s video management software. VI Web Client contains multiple vulnerabilities listed below. Open Redirect CWE-601 - CVE-2023-38574 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N| Base Score: 4.7...
CVE-2023-40592 Reflected Cross-site Scripting (XSS) on "/app/search/table" web endpoint
In Splunk Enterprise versions below 9.1.1, 9.0.6, and 8.2.12, an attacker can craft a special web request that can result in reflected cross-site scripting XSS on the “/app/search/table” web endpoint. Exploitation of this vulnerability can lead to the execution of arbitrary commands on the Splunk...
CVE-2023-25453
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Ian Sadovy WordPress Tables plugin = 1.3.9 versions...
CVE-2023-25471 WordPress WCP OpenWeather Plugin <= 2.5.0 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...
CVE-2023-34008
Unauth. Reflected Cross-Site Scripting XSS vulnerability in weDevs WP ERP plugin = 1.12.3 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Miled WordPress Social Login plugin = 3.0.4 versions...
Cross site scripting
The PostX WordPress plugin before 3.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2023-25453
CVE-2023-25453 affects the WordPress Tables plugin (wptables) for WordPress, vulnerable in versions
CVE-2023-3992 PostX - Gutenberg Post Grid Blocks < 3.0.6 - Reflected Cross-Site Scripting
The PostX WordPress plugin before 3.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2023-34032 WordPress bbPress Toolkit Plugin <= 1.0.12 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Pascal Casier bbPress Toolkit plugin = 1.0.12 versions...
CVE-2023-34184
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Bhavik Patel Woocommerce Order address Print plugin = 3.2 versions...
CVE-2023-34176
CVE-2023-34176 affects the Chilexpress Woo Oficial WordPress plugin (
CVE-2023-34184
CVE-2023-34184 – Unauthenticated reflected Cross-Site Scripting in Bhavik Patel Woocommerce Order address Print plugin ≤ 3.2. Affected product: WordPress plugin; vulnerability type: reflected XSS. Impact and CVSS: sources report base scores around 6.1 (NVD) and 7.1 (PatchStack CNA), both indicati...