Lucene search
+L

648 matches found

CNNVD
CNNVD
added 2023/10/18 12:00 a.m.10 views

WordPress Plugin WordPress Simple HTML Sitemap Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS5.9AI score0.0031EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/10/03 12:00 a.m.10 views

WordPress XML Sitemap Generator for Google Plugin < 4.1.3 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:googlexmlsitemapsproject:googlexmlsitemaps"; ifdescription...

4.8CVSS5.2AI score0.00577EPSS
SaveExploits2References1
Patchstack
Patchstack
added 2023/10/03 12:00 a.m.17 views

WordPress WP Simple HTML Sitemap Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)

Software WP Simple HTML Sitemap Type Plugin Vulnerable versions = 2.5 Fixed in 2.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-45067 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5c63e779faff Credits deokhunKim Required...

6.5CVSS5.6AI score0.0031EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/16 12:00 a.m.10 views

The vulnerability of the Sitemap plugin in the click5 content management system for WordPress allows a hacker to create an administrator-account and perform a CSRF attack.

The vulnerability of the Sitemap plugin in the click5 content management system for WordPress is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to create an account with administrator privileges and carry out a CSRF attack...

10CVSS7.6AI score0.11419EPSS
SaveExploits2References2Affected Software1
Patchstack
Patchstack
added 2023/07/26 12:00 a.m.16 views

WordPress Simple Wp Sitemap Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Simple Wp Sitemap Type Plugin Vulnerable versions = 1.2.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-24380 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 54c8db8e8d0b Credits Mika Required...

8.8CVSS6.7AI score0.00306EPSS
SaveExploits0References1Affected Software1
Packet Storm
Packet Storm
added 2023/07/25 12:00 a.m.460 views

WordPress Seo By 10Web Cross Site Scripting

Tittle: WordPress Plugin Seo By 10Web 4. Save to trigger the XSS. Classification: Type XSS OWASP top 10 A7: Cross-Site Scripting XSS CWE-79 wpScan: https://wpscan.com/vulnerability/a76b6d22-1e00-428a-8a04-12162bd0d992...

4.8CVSS7.1AI score0.00909EPSS
SaveExploits3
Patchstack
Patchstack
added 2023/07/18 12:00 a.m.7 views

WordPress Simple Sitemap – Create a Responsive HTML Sitemap Plugin <= 3.5.9 is vulnerable to Cross Site Scripting (XSS)

Software Simple Sitemap – Create a Responsive HTML Sitemap Type Plugin Vulnerable versions = 3.5.9 Fixed in 3.5.10 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6b3d5500bd75 Credi...

6.1AI score0.00272EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2023/07/18 12:00 a.m.7 views

WordPress WP Disable Sitemap Plugin <= 1.1.6.4 is vulnerable to Cross Site Scripting (XSS)

Software WP Disable Sitemap Type Plugin Vulnerable versions = 1.1.6.4 Fixed in 1.1.6.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ee9a57bb1bb5 Credits Rafie Muhammad Patchstack...

6.8AI score0.00272EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2023/07/10 4:15 p.m.26 views

CVE-2023-23869

Cross-Site Request Forgery CSRF vulnerability in Amit Agarwal Google XML Sitemap for Mobile plugin = 1.6.1 versions...

8.8CVSS5.9AI score0.00321EPSS
SaveExploits0References1
OSV
OSV
added 2023/07/10 4:15 p.m.7 views

CVE-2023-23869

Cross-Site Request Forgery CSRF vulnerability in Amit Agarwal Google XML Sitemap for Mobile plugin = 1.6.1 versions...

8.8CVSS7.3AI score0.00321EPSS
SaveExploits0References1
OSV
OSV
added 2023/07/10 4:15 p.m.11 views

CVE-2023-1780

The Companion Sitemap Generator WordPress plugin before 4.5.3 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS7.3AI score0.00998EPSS
SaveExploits2References1
NVD
NVD
added 2023/07/10 4:15 p.m.36 views

CVE-2023-1780

The Companion Sitemap Generator WordPress plugin before 4.5.3 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS6AI score0.00998EPSS
SaveExploits2References1
Prion
Prion
added 2023/07/10 4:15 p.m.20 views

Cross site scripting

The Companion Sitemap Generator WordPress plugin before 4.5.3 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

5.8CVSS6AI score0.00998EPSS
SaveExploits2References1Affected Software1
Prion
Prion
added 2023/07/10 4:15 p.m.20 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Amit Agarwal Google XML Sitemap for Mobile plugin = 1.6.1 versions...

6.8CVSS8.8AI score0.00321EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/07/10 12:19 p.m.37 views

CVE-2023-23869

CVE-2023-23869 is a CSRF vulnerability in the WordPress Google XML Sitemap for Mobile plugin (≤1.6.1). Public entries document an unauthenticated CSRF issue tied to the plugin, with impact described variably: NVD lists high impact (C/H, I/H, A/H) and overall CVSS v3.1 score of 8.8, while Patchsta...

8.8CVSS6.5AI score0.00321EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/07/10 12:19 p.m.30 views

CVE-2023-23869 WordPress Google XML Sitemap for Mobile Plugin <= 1.6.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Amit Agarwal Google XML Sitemap for Mobile plugin = 1.6.1 versions...

4.3CVSS9AI score0.00321EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/07/10 12:19 p.m.17 views

CVE-2023-23869 WordPress Google XML Sitemap for Mobile Plugin <= 1.6.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Amit Agarwal Google XML Sitemap for Mobile plugin = 1.6.1 versions...

4.3CVSS7.1AI score0.00321EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/07/10 12:00 a.m.7 views

Wrodpress Plugin google-mobile-sitemap 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. Wrodpress Plugin google-mobile-sitemap A...

8.8CVSS8.1AI score0.00321EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/07/10 12:00 a.m.7 views

PT-2023-19268 · Amit Agarwal · Google Xml Sitemap For Mobile

Name of the Vulnerable Software and Affected Versions: Amit Agarwal Google XML Sitemap for Mobile plugin versions = 1.6.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions ...

8.8CVSS8.8AI score0.00321EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/07/10 12:00 a.m.10 views

WordPress plugin Companion Sitemap Generator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.1CVSS6.8AI score0.00998EPSS
SaveExploits2References2
Rows per page
Query Builder