Lucene search
K

6724 matches found

CNVD
CNVD
added 2025/06/27 12:0 a.m.4 views

WordPress Anant Addons for Elementor plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Anant Addons for Elementor plugin, which stems from the application's lack of effective filtering and escaping of...

6.5CVSS5.8AI score0.00192EPSS
Exploits0References1
CNVD
CNVD
added 2025/06/27 12:0 a.m.2 views

COVID19 Testing Management System Take Action Component Cross-Site Scripting Vulnerability

COVID19 Testing Management System is a new crown pneumonia testing management system. COVID19 Testing Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter mark in the file...

5.4CVSS4.8AI score0.00236EPSS
Exploits0References1
NVD
NVD
added 2025/06/26 9:15 p.m.6 views

CVE-2014-0468

Vulnerability in fusionforge in the shipped Apache configuration, where the web server may execute scripts that the users would have uploaded in their raw SCM repositories SVN, Git, Bzr.... This issue affects fusionforge: before 5.3+20140506...

9.8CVSS0.00464EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/06/26 8:39 p.m.9 views

CVE-2014-0468

Vulnerability in fusionforge in the shipped Apache configuration, where the web server may execute scripts that the users would have uploaded in their raw SCM repositories SVN, Git, Bzr.... This issue affects fusionforge: before 5.3+20140506...

0.00464EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/06/26 8:39 p.m.4 views

CVE-2014-0468

Vulnerability in fusionforge in the shipped Apache configuration, where the web server may execute scripts that the users would have uploaded in their raw SCM repositories SVN, Git, Bzr.... This issue affects fusionforge: before 5.3+20140506...

6.6AI score0.00464EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/06/26 5:19 a.m.10 views

CVE-2025-43877

WRC-1167GHBK2-S contains a stored cross-site scripting vulnerability in WebGUI. If exploited, an arbitrary script may be executed on the web browser of the user who accessed WebGUI of the product...

5.4CVSS6.4AI score0.00195EPSS
Exploits0References1
NVD
NVD
added 2025/06/25 5:15 p.m.3 views

CVE-2023-44915

A cross-site scripting XSS vulnerability in the component /Login.php of c3crm up to v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the loginerror parameter...

7.1CVSS0.00281EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/06/25 12:0 a.m.2 views

CVE-2023-44915

A cross-site scripting XSS vulnerability in the component /Login.php of c3crm up to v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the loginerror parameter...

5.9AI score0.00281EPSS
Exploits1References4
NVD
NVD
added 2025/06/24 5:15 a.m.9 views

CVE-2025-43877

WRC-1167GHBK2-S contains a stored cross-site scripting vulnerability in WebGUI. If exploited, an arbitrary script may be executed on the web browser of the user who accessed WebGUI of the product...

5.4CVSS0.00195EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/06/24 4:37 a.m.3 views

CVE-2025-43877

WRC-1167GHBK2-S contains a stored cross-site scripting vulnerability in WebGUI. If exploited, an arbitrary script may be executed on the web browser of the user who accessed WebGUI of the product...

5.4CVSS6.3AI score0.00195EPSS
Exploits0References2
CVE
CVE
added 2025/06/24 4:37 a.m.19 views

CVE-2025-43877

CVE-2025-43877 affects Elecom WRC-1167GHBK2-S: stored cross-site scripting in WebGUI enabling script execution in a user’s browser upon WebGUI access. Affected product scope includes all versions of WRC-1167GHBK2-S (per JVN/Red Hat entries); no explicit firmware version fix is provided in the con...

5.4CVSS6.2AI score0.00195EPSS
Exploits0References2
CNVD
CNVD
added 2025/06/24 12:0 a.m.4 views

WordPress Contact Us Page - Contact People plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Contact Us Page - Contact People plugin, which stems from insufficient input cleanup and escaping, and can be...

6.4CVSS6.6AI score0.00198EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/06/24 12:0 a.m.10 views

PT-2025-26694 · Unknown · Wrc-1167Ghbk2-S

Name of the Vulnerable Software and Affected Versions: WRC-1167GHBK2-S affected versions not specified Description: The issue is a stored cross-site scripting vulnerability in the WebGUI of the product. If exploited, an arbitrary script may be executed on the web browser of the user who accessed...

5.4CVSS5.5AI score0.00195EPSS
Exploits0References5
NVD
NVD
added 2025/06/23 1:15 p.m.6 views

CVE-2025-6512

On a client with a non-admin user, a script can be integrated into a report. The reports could later be executed on the BRAIN2 server with administrator rights...

10CVSS0.00465EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/06/23 12:0 a.m.2 views

JetBrains TeamCity 跨站脚本漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from a cross-site...

5.4CVSS6.1AI score0.13581EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/06/23 12:0 a.m.2 views

JetBrains TeamCity 跨站脚本漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A cross-site scripting vulnerability exists in...

5.4CVSS6.1AI score0.00724EPSS
Exploits0References2
Snyk
Snyk
added 2025/06/21 3:43 a.m.3 views

Cross-site Scripting (XSS)

Overview DotNetNuke.Core is a references provider to the DotNetNuke.dll to develop extensions for the DNN Platform. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Activity Feed Attachments endpoint. An attacker can execute arbitrary scripts in the context of...

5.4CVSS5.5AI score0.00178EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/06/21 12:0 a.m.2 views

WordPress plugin 3D FlipBook 跨站脚本漏洞

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin FlipBook 1.16.15 and previous versions exist cross-site scripting vulnerability, the...

6.4CVSS6AI score0.00205EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/06/20 12:0 a.m.1 views

WordPress plugin Automatically Hierarchic Categories in Menu 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Automatically Hierarchic Categories in Menu plugin, which stems from the application's lack of effective filtering a...

6.5CVSS5.9AI score0.00192EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/06/20 12:0 a.m.1 views

WordPress plugin CP Polls 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. WordPress CP Polls plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, whi...

5.9CVSS6AI score0.00218EPSS
Exploits0References1
Rows per page
Query Builder