Lucene search
+L

147 matches found

RedhatCVE
RedhatCVE
•added 2025/03/29 2:26 p.m.•12 views

CVE-2025-26731

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in reputeinfosystems ARPrice arprice allows Stored XSS.This issue affects ARPrice: from n/a through = 4.1.3...

6.5CVSS7.2AI score0.00216EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/27 2:15 p.m.•17 views

CVE-2025-26731

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in reputeinfosystems ARPrice arprice allows Stored XSS.This issue affects ARPrice: from n/a through = 4.1.3...

6.5CVSS0.00216EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/27 2:01 p.m.•70 views

CVE-2025-26731

CVE-2025-26731 : ARPrice (WordPress Pricing Table Plugin) is affected by a stored cross-site scripting (XSS) vulnerability caused by improper input neutralization during web page generation. The issue impacts ARPrice versions from n/a up to 4.1.3. The vulnerability entry is linked to ARPrice and ...

6.5CVSS7.2AI score0.00216EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/27 12:00 a.m.•5 views

PT-2025-13188

Name of the Vulnerable Software and Affected Versions Repute Infosystems ARPrice versions n/a through 4.1.3 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For...

6.5CVSS0.00216EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/02/06 12:07 a.m.•19 views

CVE-2022-47140

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Repute InfoSystems ARMember plugin = 4.0.1 versions...

7.1CVSS5.8AI score0.00382EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/02/05 9:39 a.m.•19 views

CVE-2024-30222

Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26...

8.8CVSS5.2AI score0.00608EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 9:30 a.m.•29 views

CVE-2024-30223

Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26...

9.8CVSS5.2AI score0.00645EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 6:59 a.m.•16 views

CVE-2024-32948

Missing Authorization vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.28...

9.1CVSS5.1AI score0.00568EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 4:03 a.m.•16 views

CVE-2024-54216

Path Traversal: '.../...//' vulnerability in reputeinfosystems ARForms arforms allows Path Traversal.This issue affects ARForms: from n/a through = 6.4.1...

7.7CVSS7.2AI score0.00551EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 12:28 a.m.•21 views

CVE-2024-31270

Missing Authorization vulnerability in Repute InfoSystems ARForms Form Builder.This issue affects ARForms Form Builder: from n/a through 1.6.1...

8CVSS8.6AI score0.00361EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/24 6:15 p.m.•28 views

CVE-2025-24732

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in reputeinfosystems BookingPress bookingpress-appointment-booking allows DOM-Based XSS.This issue affects BookingPress: from n/a through = 1.1.25...

6.5CVSS0.00307EPSS
SaveExploits0References1
OSV
OSV
•added 2025/01/24 6:15 p.m.•19 views

CVE-2025-24732

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Booking & Appointment - Repute Infosystems BookingPress allows DOM-Based XSS. This issue affects BookingPress: from n/a through 1.1.25...

5.4CVSS5.8AI score0.00307EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/24 5:25 p.m.•93 views

CVE-2025-24732

CVE-2025-24732 : BookingPress plugin (WordPress) ≤ 1.1.25 suffers DOM-based XSS due to improper input neutralization during page generation. Exploitation could affect pages rendered via BookingPress. Public references list patch availability; Red Hat/NVD entries confirm the vulnerability. Remedia...

6.5CVSS7.2AI score0.00307EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/01/24 5:25 p.m.•73 views

CVE-2025-24732 WordPress BookingPress Plugin <= 1.1.25 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in reputeinfosystems BookingPress bookingpress-appointment-booking allows DOM-Based XSS.This issue affects BookingPress: from n/a through = 1.1.25...

6.5CVSS0.00307EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/02 3:15 p.m.•24 views

CVE-2023-39994

Missing Authorization vulnerability in Repute InfoSystems ARMember Premium allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ARMember Premium: from n/a through 5.9.2...

4.3CVSS0.00351EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/02 12:00 a.m.•6 views

CVE-2023-39994: Missing Authorization

Missing Authorization vulnerability in Repute InfoSystems ARMember Premium allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ARMember Premium: from n/a through 5.9.2...

4.3CVSS8.3AI score0.00351EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/09 11:31 a.m.•39 views

CVE-2024-54223 WordPress ARForms plugin <= 1.7.1 - HTML Injection vulnerability

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in reputeinfosystems ARForms Form Builder arforms-form-builder allows Code Injection.This issue affects ARForms Form Builder: from n/a through = 1.7.1...

5.3CVSS0.00332EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/19 6:15 p.m.•25 views

CVE-2022-47424

Cross-Site Request Forgery CSRF vulnerability in Repute InfoSystems ARMember, Repute InfoSystems ARMember Premium allows Cross-Site Request Forgery.This issue affects ARMember: from n/a through 4.0.5; ARMember Premium: from n/a before 6.7.1...

8.8CVSS0.00227EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/19 5:21 p.m.•66 views

CVE-2022-47424

CVE-2022-47424 is a CSRF vulnerability in Repute InfoSystems ARMember (and ARMember Premium). Affected: ARMember up to version 4.0.5; ARMember Premium up to 6.7.0.x (before 6.7.1). Root cause is Cross-Site Request Forgery enabling unauthorized actions. Remediation: update ARMember to 4.0.6 or lat...

8.8CVSS5.5AI score0.00227EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•4 views

CVE-2022-47424: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Repute InfoSystems ARMember, Repute InfoSystems ARMember Premium allows Cross-Site Request Forgery.This issue affects ARMember: from n/a through 4.0.5; ARMember Premium: from n/a before 6.7.1...

8.8CVSS7.8AI score0.00227EPSS
SaveExploits0References1
Rows per page
Query Builder