Lucene search
K

2096 matches found

NVD
NVD
added 2025/01/09 4:16 p.m.3 views

CVE-2025-22594

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hccoder Better User Shortcodes better-user-shortcodes allows Reflected XSS.This issue affects Better User Shortcodes: from n/a through = 1.0...

7.1CVSS0.00303EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/09 3:39 p.m.4 views

CVE-2025-22594 WordPress Better User Shortcodes Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hccoder – Sándor Fodor Better User Shortcodes allows Reflected XSS.This issue affects Better User Shortcodes: from n/a through 1.0...

7.1CVSS7AI score0.00303EPSS
Exploits0References1
CVE
CVE
added 2025/01/09 3:39 p.m.49 views

CVE-2025-22594

CVE-2025-22594 is a Reflected Cross-Site Scripting vulnerability in the WordPress plugin Better User Shortcodes (Sándor Fodor). The issue affects versions up to 1.0; details beyond the basic description are not provided in the connected documents. Affected product: Better User Shortcodes. Root ca...

7.1CVSS7.2AI score0.00303EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/09 3:39 p.m.15 views

CVE-2025-22817 WordPress BP Profile Shortcodes Extra plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Venutius BP Profile Shortcodes Extra bp-profile-shortcodes-extra allows Stored XSS.This issue affects BP Profile Shortcodes Extra: from n/a through = 2.6.0...

6.5CVSS0.00221EPSS
Exploits0References1
CVE
CVE
added 2025/01/09 3:39 p.m.49 views

CVE-2025-22817

CVE-2025-22817 is an authenticated Stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin BP Profile Shortcodes Extra. Affected versions are reported as from n/a through 2.6.0. The issue stems from improper neutralization of input during web page generation, enabling stored XSS. ...

6.5CVSS7.2AI score0.00221EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/09 3:38 p.m.8 views

CVE-2025-22823 WordPress Genesis Style Shortcodes Plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Justin Twerdy Genesis Style Shortcodes allows DOM-Based XSS.This issue affects Genesis Style Shortcodes: from n/a through 1.0...

6.5CVSS7AI score0.002EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/09 3:38 p.m.13 views

CVE-2025-22823 WordPress Genesis Style Shortcodes Plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jtwerdy Genesis Style Shortcodes genesis-style-shortcodes allows DOM-Based XSS.This issue affects Genesis Style Shortcodes: from n/a through = 1.0...

6.5CVSS0.002EPSS
Exploits0References1
CVE
CVE
added 2025/01/09 3:38 p.m.53 views

CVE-2025-22823

CVE-2025-22823 describes a DOM-based Cross-Site Scripting (XSS) in the Genesis Style Shortcodes plugin for WordPress. Affected: Genesis Style Shortcodes

6.5CVSS7.2AI score0.002EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.2 views

WordPress plugin Genesis Style Shortcodes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.5CVSS7.6AI score0.002EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.2 views

WordPress plugin BP Profile Shortcodes Extra 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

6.5CVSS7.5AI score0.00221EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.2 views

WordPress plugin Better User Shortcodes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPre...

7.1CVSS7.6AI score0.00303EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/01/09 12:0 a.m.2 views

PT-2025-4731 · Unknown · Genesis Style Shortcodes

Name of the Vulnerable Software and Affected Versions: Genesis Style Shortcodes versions n/a through 1.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could potentially inject malicious...

6.5CVSS6AI score0.002EPSS
Exploits0References4
Patchstack
Patchstack
added 2025/01/07 9:48 p.m.3 views

WordPress BP Profile Shortcodes Extra plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis Patchstack Alliance in WordPress Plugin BP Profile Shortcodes Extra versions = 2.6.0...

6.5CVSS6.1AI score0.00221EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2025/01/07 9:35 p.m.2 views

WordPress Genesis Style Shortcodes Plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 Patchstack Alliance in WordPress Plugin Genesis Style Shortcodes versions = 1.0...

6.5CVSS6.1AI score0.002EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2025/01/07 10:32 a.m.1 views

WordPress Better User Shortcodes Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Better User Shortcodes versions = 1.0...

7.1CVSS6.1AI score0.00303EPSS
Exploits0Affected Software1
OSV
OSV
added 2025/01/02 12:15 p.m.1 views

CVE-2024-56242

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tyche Softwares Arconix Shortcodes allows Stored XSS.This issue affects Arconix Shortcodes: from n/a through 2.1.14...

5.4CVSS7.3AI score0.00239EPSS
Exploits0References1
NVD
NVD
added 2025/01/02 12:15 p.m.21 views

CVE-2024-56242

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tychesoftwares Arconix Shortcodes arconix-shortcodes allows Stored XSS.This issue affects Arconix Shortcodes: from n/a through = 2.1.14...

6.5CVSS0.00239EPSS
Exploits0References1
NVD
NVD
added 2025/01/02 12:15 p.m.5 views

CVE-2023-46632

Missing Authorization vulnerability in David Cramer My Shortcodes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Shortcodes: from n/a through 2.3...

7.1CVSS0.00364EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/02 12:1 p.m.17 views

CVE-2024-56242 WordPress Arconix Shortcodes plugin <= 2.1.14 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tychesoftwares Arconix Shortcodes arconix-shortcodes allows Stored XSS.This issue affects Arconix Shortcodes: from n/a through = 2.1.14...

6.5CVSS0.00239EPSS
Exploits0References1
CVE
CVE
added 2025/01/02 12:1 p.m.54 views

CVE-2024-56242

CVE-2024-56242 is a Stored XSS in Arconix Shortcodes for WordPress. The issue arises from improper input neutralization during web page generation, allowing attacker-controlled input to be rendered as executable script. Affected product: Arconix Shortcodes, affected versions listed as

6.5CVSS7.2AI score0.00239EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder