Lucene search
+L

259 matches found

CVE
CVE
added 2025/08/21 12:0 a.m.46 views

CVE-2025-52352

CVE-2025-52352 affects Aikaan IoT management platform version 3.25.0325-5-g2e9c59796. The UI can hide the sign-up option, but the signup API remains publicly accessible, allowing unauthenticated account creation and leading to authentication bypass and unauthorized admin portal access. Connected ...

9.8CVSS7.4AI score0.00572EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/08/20 9:7 a.m.11 views

WordPress Sign-up Sheets Plugin <= 2.3.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nabil Irawan in WordPress Plugin Sign-up Sheets versions = 2.3.3...

4.3CVSS6.6AI score0.00132EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
added 2025/08/20 8:3 a.m.4 views

CVE-2025-49391 WordPress Sign-up Sheets Plugin <= 2.3.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets allows Cross Site Request Forgery.This issue affects Sign-up Sheets: from n/a through = 2.3.3...

4.3CVSS5.1AI score0.00132EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/20 8:3 a.m.19 views

CVE-2025-49391 WordPress Sign-up Sheets Plugin <= 2.3.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets allows Cross Site Request Forgery.This issue affects Sign-up Sheets: from n/a through = 2.3.3...

4.3CVSS0.00132EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/20 12:0 a.m.11 views

PT-2025-33935 · Fetch Designs · Fetch Designs Sign-Up Sheets

Name of the Vulnerable Software and Affected Versions: Fetch Designs Sign-up Sheets versions through 2.3.3 Description: The vulnerability allows for Cross-Site Request Forgery CSRF. This issue affects the Sign-up Sheets functionality. Recommendations: At the moment, there is no information about ...

4.3CVSS6.2AI score0.00132EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/08/20 12:0 a.m.7 views

WordPress plugin Sign-up Sheets 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

4.3CVSS6.5AI score0.00132EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/05/29 2:40 p.m.12 views

CVE-2025-3704

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DBAR Productions Volunteer Sign Up Sheets pta-volunteer-sign-up-sheets allows Stored XSS.This issue affects Volunteer Sign Up Sheets: from n/a through 5.5.5...

5.9CVSS5.9AI score0.00186EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/27 3:15 p.m.17 views

CVE-2025-3704

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DBAR Productions Volunteer Sign Up Sheets pta-volunteer-sign-up-sheets allows Stored XSS.This issue affects Volunteer Sign Up Sheets: from n/a through 5.5.5...

5.9CVSS0.00186EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/27 3:15 p.m.8 views

CVE-2025-3704

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DBAR Productions Volunteer Sign Up Sheets allows Stored XSS.This issue affects Volunteer Sign Up Sheets: from n/a before 5.5.5. The patch is available exclusively on GitHub at...

5.9CVSS7AI score
SaveExploits0References2
CVE
CVE
added 2025/05/27 2:39 p.m.56 views

CVE-2025-3704

CVE-2025-3704 concerns the WordPress plugin “Volunteer Sign Up Sheets” by DBAR Productions. The vulnerability is an stored XSS caused by improper input neutralization during web page generation in versions prior to 5.5.5. Public references indicate the patch is available only on GitHub (pt a-volu...

5.9CVSS5.9AI score0.00186EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/27 2:39 p.m.31 views

CVE-2025-3704 WordPress Volunteer Sign Up Sheets plugin < 5.5.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DBAR Productions Volunteer Sign Up Sheets pta-volunteer-sign-up-sheets allows Stored XSS.This issue affects Volunteer Sign Up Sheets: from n/a through 5.5.5...

5.9CVSS0.00186EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/27 12:0 a.m.11 views

PT-2025-23002 · Unknown · Volunteer Sign Up Sheets

Name of the Vulnerable Software and Affected Versions: Volunteer Sign Up Sheets versions prior to 5.5.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that an attacker can inject...

5.9CVSS5.5AI score0.00186EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/05/27 12:0 a.m.7 views

Volunteer Sign Up Sheets 跨站脚本漏洞

Volunteer Sign Up Sheets is an application by Stephen Sherrard, an individual developer. A cross-site scripting vulnerability exists in Volunteer Sign Up Sheets versions prior to 5.5.5, which stems from improper input neutralization and could lead to stored cross-site scripting...

5.9CVSS5.4AI score0.00186EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 7:39 a.m.11 views

CVE-2024-31303

Cross-Site Request Forgery CSRF vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets.This issue affects Sign-up Sheets: from n/a through = 2.2.11.1...

4.3CVSS7.2AI score0.00202EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:12 a.m.10 views

CVE-2023-23701

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Andrew @ Geeenville Web Design Easy Sign Up plugin = 3.4.1 versions...

6.5CVSS5.6AI score0.00361EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:41 a.m.10 views

CVE-2023-39165

Cross-Site Request Forgery CSRF vulnerability in Fetch Designs Sign-up Sheets plugin = 2.2.8 versions...

8.8CVSS7.1AI score0.00208EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/22 8:15 a.m.11 views

CVE-2019-13190

In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page...

5.3CVSS6.9AI score0.01387EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/17 11:10 p.m.23 views

CVE-2025-26996

Improper Control of Generation of Code 'Code Injection' vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets allows Code Injection.This issue affects Sign-up Sheets: from n/a through = 2.3.0.1...

6.5CVSS7.2AI score0.00306EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/15 10:15 p.m.11 views

CVE-2025-26996

Improper Control of Generation of Code 'Code Injection' vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets allows Code Injection.This issue affects Sign-up Sheets: from n/a through = 2.3.0.1...

6.5CVSS0.00306EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/15 9:53 p.m.8 views

CVE-2025-26996 WordPress Sign-up Sheets plugin <= 2.3.0.1 - Shortcode Injection vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets allows Code Injection.This issue affects Sign-up Sheets: from n/a through = 2.3.0.1...

6.5CVSS7.2AI score0.00306EPSS
SaveExploits0References1
Rows per page
Query Builder