Lucene search
+L

3094 matches found

NVD
NVD
•added 2024/03/31 7:15 p.m.•37 views

CVE-2024-31120

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Stored XSS.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3...

6.5CVSS6.4AI score0.00382EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/03/31 7:15 p.m.•20 views

CVE-2024-31120

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Stored XSS.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3...

5.4CVSS5.8AI score0.00382EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/03/31 12:00 a.m.•22 views

PT-2024-23482 · Unknown · Wppdf.Org Responsive Flipbook

Name of the Vulnerable Software and Affected Versions: wppdf.Org Responsive flipbook versions 1.0.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Stored Cross-site Scripting XSS vulnerability. This allows for the...

6.5CVSS8.5AI score0.00331EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/31 12:00 a.m.•23 views

WordPress Plugin Responsive flipbook 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Responsive flipbook A...

6.5CVSS7.5AI score0.00331EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/31 12:00 a.m.•14 views

CVE-2024-30550: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Reflected XSS.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3...

7.1CVSS5.8AI score0.00398EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/31 12:00 a.m.•8 views

CVE-2024-31120: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Stored XSS.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3...

6.5CVSS5.8AI score0.00382EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/31 12:00 a.m.•8 views

CVE-2024-30552: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wppdf.Org Responsive flipbook allows Stored XSS.This issue affects Responsive flipbook: from n/a through 1.0.0...

6.5CVSS5.8AI score0.00331EPSS
SaveExploits0References2
NVD
NVD
•added 2024/03/29 5:15 p.m.•27 views

CVE-2024-30447

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative Solutions Creative Image Slider – Responsive Slider Plugin allows Reflected XSS.This issue affects Creative Image Slider – Responsive Slider Plugin: from n/a through 2.1.3...

7.1CVSS6.9AI score0.00375EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/29 4:51 p.m.•70 views

CVE-2024-30447

Technical details about CVE-2024-30447 (Creative Image Slider – Responsive Slider Plugin) are not provided in the connected documents. No product version, root cause, impact, or patch information is publicly available here; monitor for official advisories and vendor/user notifications.

7.1CVSS8.6AI score0.00375EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/29 2:15 p.m.•19 views

CVE-2024-30497

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in I Thirteen Web Solution WP Responsive Tabs horizontal vertical and accordion Tabs.This issue affects WP Responsive Tabs horizontal vertical and accordion Tabs: from n/a through 1.1.17...

8.8CVSS8.9AI score0.00577EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/03/29 2:15 p.m.•16 views

CVE-2024-30497

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in I Thirteen Web Solution WP Responsive Tabs horizontal vertical and accordion Tabs.This issue affects WP Responsive Tabs horizontal vertical and accordion Tabs: from n/a through 1.1.17...

8.8CVSS5.8AI score0.00577EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/29 1:59 p.m.•85 views

CVE-2024-30497

CVE-2024-30497 denotes an SQL injection vulnerability in the WP Responsive Tabs (horizontal, vertical, and accordion Tabs) WordPress plugin. Affected versions are

8.8CVSS8.9AI score0.00577EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/03/29 12:44 p.m.•20 views

WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Responsive Image Gallery, Gallery Album versions = 2.0.3...

6.5CVSS7.1AI score0.00382EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
•added 2024/03/29 11:02 a.m.•13 views

CVE-2024-2848

The Responsive theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the savefootertextcallback function in all versions up to, and including, 5.0.2. This makes it possible for unauthenticated attackers to inject arbitrary HTML content into th...

7.5CVSS6.9AI score0.00652EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/03/29 11:02 a.m.•37 views

CVE-2024-2848 Responsive <= 5.0.2 - Missing Authorization to HTML Injection

The Responsive theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the savefootertextcallback function in all versions up to, and including, 5.0.2. This makes it possible for unauthenticated attackers to inject arbitrary HTML content into th...

7.5CVSS7.5AI score0.00652EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/03/29 10:46 a.m.•21 views

WordPress Responsive flipbook plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Responsive flipbook versions = 1.0.0...

6.5CVSS7.1AI score0.00331EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/03/29 9:06 a.m.•17 views

WordPress Lightbox slider – Responsive Lightbox Gallery plugin <= 1.9.9 - Authenticated (Contributor+) PHP Object Injection vulnerability

Authenticated Contributor+ PHP Object Injection vulnerability discovered by Francesco Carlucci in WordPress Plugin Lightbox slider – Responsive Lightbox Gallery versions = 1.9.9...

5.4CVSS8.8AI score0.00531EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/03/29 6:43 a.m.•20 views

CVE-2024-1858 Lightbox slider – Responsive Lightbox Gallery <= 1.9.9 - Authenticated (Contributor+) PHP Object Injection

The Lightbox slider – Responsive Lightbox Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.9.9 via deserialization of untrusted input through post meta data. This makes it possible for authenticated attackers, with contributor-level access...

5.4CVSS7.4AI score0.00531EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/03/29 12:00 a.m.•30 views

WordPress Responsive flipbook Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Responsive flipbook Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30552 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID a99f84dea2e3 Credits LVT-tholv2k Required privilege...

6.5CVSS6.6AI score0.00331EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2024/03/29 12:00 a.m.•14 views

WordPress Plugin Responsive 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

7.5CVSS7.8AI score0.00652EPSS
SaveExploits0References3
Rows per page
Query Builder