Lucene search
+L

304 matches found

CNNVD
CNNVD
added 2023/01/02 12:00 a.m.7 views

WordPress plugin Popup Maker 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

5.4CVSS5.4AI score0.00562EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2021/10/18 12:00 a.m.42 views

WordPress 插件跨站脚本漏洞

WordPress plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress PDF Flipbook, 3D Flipbook, DearFlip plugin versions prior to 1.7.10, which stems from not bypassing the class attribute of its shortcode before outputting back to the attribut...

5.4CVSS5.5AI score0.0065EPSS
SaveExploits2References2
OSV
OSV
added 2021/09/20 10:15 a.m.10 views

CVE-2021-24606

The Availability Calendar WordPress plugin before 1.2.1 does not escape the category attribute from its shortcode before using it in a SQL statement, leading to a SQL Injection issue, which can be exploited by any user able to add shortcode to posts/pages, such as contributor+...

8.8CVSS7.3AI score0.01334EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2021/09/20 10:15 a.m.6 views

CVE-2021-24606

The Availability Calendar WordPress plugin before 1.2.1 does not escape the category attribute from its shortcode before using it in a SQL statement, leading to a SQL Injection issue, which can be exploited by any user able to add shortcode to posts/pages, such as contributor+...

8.8CVSS7.3AI score0.01334EPSS
SaveExploits2References2
Rows per page
Query Builder