Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-33805

Malicious code in bioql PyPI...

6.4CVSS8.7AI score0.00126EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 6:39 a.m.4 views

CVE-2024-11424

The Slick Sitemap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slick-sitemap' shortcode in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

6.4CVSS5.8AI score0.00126EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/11/21 11:14 p.m.2 views

WordPress Slick Sitemap plugin <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Slick Sitemap versions = 2.0.0...

6.4CVSS5.7AI score0.00126EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2024/11/21 11:15 a.m.8 views

CVE-2024-11424

The Slick Sitemap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slick-sitemap' shortcode in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

6.4CVSS0.00126EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/11/21 2:6 a.m.13 views

CVE-2024-11424 Slick Sitemap <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Slick Sitemap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slick-sitemap' shortcode in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

6.4CVSS0.00126EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/11/21 2:6 a.m.10 views

CVE-2024-11424 Slick Sitemap <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Slick Sitemap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slick-sitemap' shortcode in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

6.4CVSS5.8AI score0.00126EPSS
Exploits0References3
Patchstack
Patchstack
added 2024/11/21 12:0 a.m.7 views

WordPress Slick Sitemap Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Slick Sitemap Type Plugin Vulnerable versions = 2.0.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11424 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 87cc32c756e9 Credits zakaria Required privilege...

6.4CVSS6AI score0.00126EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder