Lucene search
+L

3084 matches found

Patchstack
Patchstack
•added 2025/10/06 10:32 p.m.•17 views

WordPress Responsive Lightbox & Gallery plugin < 2.5.3 - Unauthenticated Stored-XSS via Comments vulnerability

Unauthenticated Stored-XSS via Comments vulnerability discovered by Matthew Rollings in WordPress Plugin Responsive Lightbox versions 2.5.3...

6.3CVSS6.8AI score0.00214EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2025/10/06 6:32 a.m.•21 views

EUVD-2025-32491

The Responsive Lightbox & Gallery WordPress plugin before 2.5.3 does not properly handle HTML tag attributes modifications, potentially allowing unauthenticated attackers to abuse the functionality to include event handlers and conduct Stored XSS attacks...

6.3CVSS5.5AI score0.00214EPSS
SaveExploits0References3
NVD
NVD
•added 2025/10/06 6:15 a.m.•27 views

CVE-2025-9710

The Responsive Lightbox & Gallery WordPress plugin before 2.5.3 does not properly handle HTML tag attributes modifications, potentially allowing unauthenticated attackers to abuse the functionality to include event handlers and conduct Stored XSS attacks...

6.3CVSS0.00214EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/06 6:00 a.m.•35 views

CVE-2025-9710 Responsive Lightbox & Gallery < 2.5.3 - Unauthenticated Stored-XSS via Comments

The Responsive Lightbox & Gallery WordPress plugin before 2.5.3 does not properly handle HTML tag attributes modifications, potentially allowing unauthenticated attackers to abuse the functionality to include event handlers and conduct Stored XSS attacks...

0.00214EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/06 6:00 a.m.•6 views

CVE-2025-9710 Responsive Lightbox & Gallery < 2.5.3 - Unauthenticated Stored-XSS via Comments

The Responsive Lightbox & Gallery WordPress plugin before 2.5.3 does not properly handle HTML tag attributes modifications, potentially allowing unauthenticated attackers to abuse the functionality to include event handlers and conduct Stored XSS attacks...

5.9AI score0.00214EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/06 6:00 a.m.•40 views

CVE-2025-9710

The Responsive Lightbox & Gallery WordPress plugin, in versions prior to 2.5.3 , contains a vulnerability where it fails to properly handle HTML tag attribute modifications . This flaw allows unauthenticated attackers to include event handlers, leading to Stored Cross-Site Scripting (XSS) attacks...

6.3CVSS5.9AI score0.00214EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/06 2:32 a.m.•11 views

CVE-2025-11316 Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 findCategoryPage.do findCategoryPage sql injection

A vulnerability was determined in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. Affected by this issue is the function findCategoryPage of the file findCategoryPage.do. Executing manipulation of the argument tenantId can lead to sql injection. The attack can be executed...

7.5CVSS7AI score0.00502EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/10/06 12:00 a.m.•25 views

PT-2025-40854

Name of the Vulnerable Software and Affected Versions Responsive Lightbox & Gallery WordPress plugin versions prior to 2.5.3 Description The software does not properly handle HTML tag attribute modifications, which could allow unauthenticated attackers to include event handlers and conduct Stored...

6.3CVSS5.2AI score0.00214EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/06 12:00 a.m.•6 views

CVE-2025-9710: Undefined Security Weakness

The Responsive Lightbox & Gallery WordPress plugin before 2.5.3 does not properly handle HTML tag attributes modifications, potentially allowing unauthenticated attackers to abuse the functionality to include event handlers and conduct Stored XSS attacks...

6.3CVSS5.9AI score0.00214EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/06 12:00 a.m.•16 views

WordPress plugin Responsive Lightbox & Gallery 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security...

6.3CVSS5.7AI score0.00214EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-26938

Malicious code in bioql PyPI...

7.2CVSS6.5AI score0.00467EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2024-25163

Malicious code in bioql PyPI...

6.5CVSS8.6AI score0.00312EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2025-27616

Malicious code in bioql PyPI...

2.6CVSS3.9AI score0.00186EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2025-29011

Malicious code in bioql PyPI...

6.1CVSS6.5AI score0.00159EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2025-11302

Malicious code in bioql PyPI...

6.5CVSS7.3AI score0.00318EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2024-29031

Malicious code in bioql PyPI...

6.5CVSS8.6AI score0.00382EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2024-51758

Malicious code in bioql PyPI...

5.4CVSS8.7AI score0.00264EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2024-45863

Malicious code in bioql PyPI...

6.5CVSS8.6AI score0.00265EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2024-45409

Malicious code in bioql PyPI...

6.5CVSS6.4AI score0.00263EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2024-45509

Malicious code in bioql PyPI...

7.1CVSS8.7AI score0.0027EPSS
SaveExploits0References1
Rows per page
Query Builder