Lucene search
+L

9903 matches found

WPVulnDB
WPVulnDB
•added 2023/06/21 12:00 a.m.•18 views

WooCommerce Pre-Orders < 2.0.1 - Contributor+ Stored XSS

The plugin does not validate and escape its layout shortcode attribute before outputting it back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks PoC woocommercepreordercountdown productid="64"...

5.5AI score0.00377EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2023/06/19 2:15 p.m.•8 views

CVE-2023-35772

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Alain Gonzalez Google Map Shortcode plugin = 3.1.2 versions...

6.1CVSS7.3AI score0.00382EPSS
SaveExploits0References1
NVD
NVD
•added 2023/06/19 2:15 p.m.•23 views

CVE-2023-35772

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Alain Gonzalez Google Map Shortcode plugin = 3.1.2 versions...

7.1CVSS6.2AI score0.00382EPSS
SaveExploits0References1
Prion
Prion
•added 2023/06/19 2:15 p.m.•28 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Alain Gonzalez Google Map Shortcode plugin = 3.1.2 versions...

5.8CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/06/19 1:54 p.m.•15 views

CVE-2023-35772 WordPress Google Map Shortcode Plugin <= 3.1.2 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Alain Gonzalez Google Map Shortcode plugin = 3.1.2 versions...

7.1CVSS5.8AI score0.00382EPSS
SaveExploits0References1
CVE
CVE
•added 2023/06/19 1:54 p.m.•58 views

CVE-2023-35772

CVE-2023-35772 affects the Google Map Shortcode WordPress plugin. Affected versions are

7.1CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2023/06/19 11:15 a.m.•9 views

CVE-2023-2899

The Google Map Shortcode WordPress plugin through 3.1.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

5.4CVSS7.3AI score0.00444EPSS
SaveExploits2References1
OSV
OSV
•added 2023/06/19 11:15 a.m.•7 views

CVE-2023-0368

The Responsive Tabs For WPBakery Page Builder formerly Visual Composer WordPress plugin through 1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to...

5.4CVSS6.7AI score0.00444EPSS
SaveExploits2References1
OSV
OSV
•added 2023/06/19 11:15 a.m.•6 views

CVE-2023-0489

The SlideOnline WordPress plugin through 1.2.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

5.4CVSS7.3AI score0.00444EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2023/06/19 10:52 a.m.•18 views

CVE-2023-0489 SlideOnline <= 1.2.1 - Contributor+ Stored XSS

The SlideOnline WordPress plugin through 1.2.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

5.8AI score0.00444EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2023/06/19 10:52 a.m.•14 views

CVE-2023-2899 Google Map Shortcode <= 3.1.2 - Contributor+ Stored XSS

The Google Map Shortcode WordPress plugin through 3.1.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

5.8AI score0.00444EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2023/06/19 10:52 a.m.•45 views

CVE-2023-2899 Google Map Shortcode <= 3.1.2 - Contributor+ Stored XSS

The Google Map Shortcode WordPress plugin through 3.1.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

5.5AI score0.00444EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2023/06/19 12:00 a.m.•8 views

WordPress plugin Google Map Shortcode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS6.8AI score0.00382EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/06/19 12:00 a.m.•11 views

PT-2023-22067 · WordPress · Google Map Shortcode

Name of the Vulnerable Software and Affected Versions: Google Map Shortcode WordPress plugin versions 3.1.2 and earlier Description: The issue allows users with a role as low as contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privilege users such as...

5.4CVSS8.3AI score0.00444EPSS
SaveExploits2References6
CNNVD
CNNVD
•added 2023/06/19 12:00 a.m.•7 views

WordPress Plugin Google Map Shortcode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.4CVSS6.5AI score0.00444EPSS
SaveExploits2References2
Patchstack
Patchstack
•added 2023/06/16 12:00 a.m.•17 views

WordPress Google Map Shortcode Plugin <= 3.1.2 is vulnerable to Cross Site Scripting (XSS)

Software Google Map Shortcode Type Plugin Vulnerable versions = 3.1.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-35772 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2577a60ecf63 Credits Nguyen Xuan...

7.1CVSS5.6AI score0.00382EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2023/06/16 12:00 a.m.•21 views

Google Map Shortcode <= 3.1.2 - Reflected XSS

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS6AI score0.00382EPSS
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
•added 2023/06/16 12:00 a.m.•18 views

Sermon'e – Sermons Online <= 1.0.0 - Contributor+ Stored XSS

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

6.5CVSS5.8AI score0.00511EPSS
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
•added 2023/06/15 12:00 a.m.•19 views

MasterStudy LMS < 3.0.9 - Contributor+ Stored XSS

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

6.5CVSS7.7AI score0.00377EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2023/06/15 12:00 a.m.•14 views

WordPress WP Matterport Shortcode Plugin <= 2.1.4 is vulnerable to Cross Site Scripting (XSS)

Software WP Matterport Shortcode Type Plugin Vulnerable versions = 2.1.4 Fixed in 2.1.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-35094 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 896701a47def Credits yuyudhn Require...

6.5CVSS5.8AI score0.00433EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder