Lucene search
K

110 matches found

CNNVD
CNNVD
added 2025/07/21 12:0 a.m.2 views

Cadwyn 跨站脚本漏洞

Cadwyn is an API version control application by the individual developer Stanislav Zmiev. A cross-site scripting vulnerability exists in Cadwyn 5.4.3 and earlier versions, which stems from insufficient validation of the /docs endpoint version parameter input and could lead to a reflective...

7.6CVSS5.8AI score0.00244EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/07/16 12:0 a.m.4 views

WordPress plugin Dot html,php,xml etc pages Cross Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS5.7AI score0.00191EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/06/27 12:0 a.m.1 views

WordPress plugin HidePost 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

7.1CVSS6AI score0.00109EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/06/27 12:0 a.m.1 views

WordPress plugin Backwp 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

7.1CVSS5.9AI score0.00215EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/06/27 12:0 a.m.5 views

WordPress plugin WPCRM - CRM for Contact form CF7 & WooCommerce cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS5.7AI score0.00222EPSS
Exploits0References1
Packet Storm News
Packet Storm News
added 2025/06/16 12:0 a.m.2 views

Miliaris Amigdala 2.2.6 Cross Site Scripting

Miliaris Amigdala version 2.2.6 suffers from multiple reflective cross site scripting vulnerabilities. Please note this entry aggregates three separate advisories...

6.1CVSS6.7AI score0.00231EPSS
Exploits0
CNNVD
CNNVD
added 2025/06/09 12:0 a.m.4 views

Webkul Software Bagisto 跨站脚本漏洞

Webkul Software Bagisto is an open source e-commerce framework from Webkul Software, India. A cross-site scripting vulnerability exists in Webkul Software Bagisto version v2.0.0, which stems from reflective cross-site scripting and could lead to the execution of malicious JavaScript code...

6.1CVSS6AI score0.00195EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/05/23 12:0 a.m.1 views

WordPress plugin Butcher 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

7.1CVSS6.3AI score0.00235EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/05/23 12:0 a.m.2 views

WordPress plugin Tayori Form 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6.9AI score0.00235EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/04/29 12:0 a.m.2 views

Audiobookshelf 跨站脚本漏洞

Audiobookshelf is a self-hosted audiobook and podcast server from Audiobookshelf open source. A cross-site scripting vulnerability exists in Audiobookshelf versions prior to 2.21.0, which stems from improper handling of input in the /api/upload endpoint and could lead to a reflective cross-site...

6.9CVSS5.8AI score0.00292EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/04/17 12:0 a.m.3 views

WordPress plugin IP2Location Variables 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

7.1CVSS7.1AI score0.00127EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/17 12:0 a.m.2 views

WordPress plugin All push notification for WP 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

7.1CVSS7.1AI score0.00127EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/10 12:0 a.m.2 views

WordPress plugin Hugh Mungus Vice Versa 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6.8AI score0.00191EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/10 12:0 a.m.1 views

WordPress plugin Popping Content Light 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

7.1CVSS6.8AI score0.00235EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/08 12:0 a.m.7 views

Ivanti Endpoint Manager 跨站脚本漏洞

Ivanti Endpoint Manager is an enterprise-grade endpoint management solution, mainly used for centralized management of various types of devices including Windows, MacOS, Linux, iOS/Android mobile devices, etc., to achieve unified configuration, security control and remote operation and maintenanc...

9.6CVSS6.5AI score0.01034EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/04/03 12:0 a.m.3 views

WordPress plugin Social Share And Social Locker 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

7.1CVSS6.8AI score0.00208EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/03 12:0 a.m.3 views

WordPress plugin lexicata Lexicata 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

7.1CVSS6.9AI score0.00208EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/03 12:0 a.m.3 views

WordPress plugin Snow Storm 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7AI score0.00257EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/01 12:0 a.m.4 views

WordPress plugin Breezing Forms 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.8AI score0.00273EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/04/01 12:0 a.m.3 views

WordPress plugin LeadLab by wiredminds 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress plugin LeadLab...

7.1CVSS6.8AI score0.00274EPSS
Exploits0References2
Rows per page
Query Builder