Lucene search
+L

4663 matches found

Patchstack
Patchstack
added 2024/04/22 12:00 a.m.17 views

WordPress Prime Slider – Addons For Elementor Plugin <= 3.14.0 is vulnerable to Cross Site Scripting (XSS)

Software Prime Slider – Addons For Elementor Type Plugin Vulnerable versions = 3.14.0 Fixed in 3.14.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1730 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 86c7837298c1 Credits...

5.4CVSS5.7AI score0.0034EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/04/22 12:00 a.m.8 views

PT-2024-24768 · Elementor · The Prime Slider – Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Prime Slider – Addons For Elementor versions 3.13.2 and earlier Description: The issue is related to a Missing Authorization vulnerability. This vulnerability affects the Prime Slider – Addons For Elementor plugin. Recommendations: For Prime...

8.8CVSS6.7AI score0.00514EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2024/04/22 12:00 a.m.14 views

WordPress Widget Post Slider Plugin <= 1.3.5 is vulnerable to Cross Site Scripting (XSS)

Software Widget Post Slider Type Plugin Vulnerable versions = 1.3.5 Fixed in 1.3.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32801 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 7032c0856ac3 Credits Joshua Chan Required privilege...

5.9CVSS6.6AI score0.00339EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2024/04/20 4:15 a.m.23 views

CVE-2024-1730

The Prime Slider – Addons For Elementor Revolution of a slider, Hero Slider, Media Slider, Drag Drop Slider, Video Slider, Product Slider, Ecommerce Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via urls in link fields, images from URLs, and html tags used in widgets in...

5.4CVSS5AI score0.0034EPSS
SaveExploits0References2
OSV
OSV
added 2024/04/20 4:15 a.m.8 views

CVE-2024-1730

The Prime Slider – Addons For Elementor Revolution of a slider, Hero Slider, Media Slider, Drag Drop Slider, Video Slider, Product Slider, Ecommerce Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via urls in link fields, images from URLs, and html tags used in widgets in...

5.4CVSS5.9AI score0.0034EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/04/20 3:21 a.m.13 views

CVE-2024-1730 Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Media Slider, Drag Drop Slider, Video Slider, Product Slider, Ecommerce Slider) <= 3.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Prime Slider – Addons For Elementor Revolution of a slider, Hero Slider, Media Slider, Drag Drop Slider, Video Slider, Product Slider, Ecommerce Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via urls in link fields, images from URLs, and html tags used in widgets in...

5.4CVSS6.1AI score0.0034EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/04/20 3:21 a.m.32 views

CVE-2024-1730 Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Media Slider, Drag Drop Slider, Video Slider, Product Slider, Ecommerce Slider) <= 3.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Prime Slider – Addons For Elementor Revolution of a slider, Hero Slider, Media Slider, Drag Drop Slider, Video Slider, Product Slider, Ecommerce Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via urls in link fields, images from URLs, and html tags used in widgets in...

5.4CVSS5.2AI score0.0034EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/04/20 12:00 a.m.6 views

WordPress Plugin Prime Slider 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security...

5.4CVSS6AI score0.0034EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/04/20 12:00 a.m.6 views

PT-2024-18258 · WordPress · The Prime Slider – Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Prime Slider – Addons For Elementor plugin for WordPress versions up to, and including, 3.14.0 Description: The issue is related to Stored Cross-Site Scripting via urls in link fields, images from URLs, and html tags used in widgets due t...

5.4CVSS6AI score0.0034EPSS
SaveExploits0References6
OSV
OSV
added 2024/04/18 11:15 a.m.15 views

CVE-2024-32600

Deserialization of Untrusted Data vulnerability in Averta Master Slider.This issue affects Master Slider: from n/a through 3.9.5...

9.6CVSS5.8AI score0.00492EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/18 11:15 a.m.27 views

CVE-2024-32600

Deserialization of Untrusted Data vulnerability in Averta Master Slider.This issue affects Master Slider: from n/a through 3.9.5...

9.6CVSS8.3AI score0.00492EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/18 10:18 a.m.110 views

CVE-2024-32600

CVE-2024-32600 describes a Deserialization of Untrusted Data vulnerability in Master Slider (Master Slider – Responsive Touch Slider). Affected range: from n/a through 3.9.5. The issue is categorized as an unauthenticated PHP Object Injection, enabling an attacker to exploit via deserialization o...

9.6CVSS5.2AI score0.00492EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/18 10:18 a.m.21 views

CVE-2024-32600 WordPress Master Slider plugin <= 3.9.5 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Averta Master Slider.This issue affects Master Slider: from n/a through 3.9.5...

8.3CVSS5.2AI score0.00492EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/18 10:18 a.m.50 views

CVE-2024-32600 WordPress Master Slider plugin <= 3.9.5 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Averta Master Slider.This issue affects Master Slider: from n/a through 3.9.5...

8.3CVSS8.5AI score0.00492EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/18 10:15 a.m.8 views

CVE-2024-32580

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Averta Master Slider allows Stored XSS.This issue affects Master Slider: from n/a through 3.9.8...

5.4CVSS5.8AI score0.00317EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/18 10:15 a.m.33 views

CVE-2024-32580

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Averta Master Slider allows Stored XSS.This issue affects Master Slider: from n/a through 3.9.8...

6.5CVSS6.4AI score0.00317EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/18 10:15 a.m.7 views

CVE-2024-32578

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 10Web Slider by 10Web allows Reflected XSS.This issue affects Slider by 10Web: from n/a through 1.2.54...

6.1CVSS5.8AI score0.00522EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/18 10:15 a.m.33 views

CVE-2024-32578

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 10Web Slider by 10Web allows Reflected XSS.This issue affects Slider by 10Web: from n/a through 1.2.54...

7.1CVSS6.9AI score0.00522EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/18 9:30 a.m.35 views

CVE-2024-32578 WordPress Sliderby10Web plugin <= 1.2.54 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 10Web Slider by 10Web allows Reflected XSS.This issue affects Slider by 10Web: from n/a through 1.2.54...

7.1CVSS7.1AI score0.00522EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/18 9:30 a.m.102 views

CVE-2024-32578

Technical details for CVE-2024-32578 are not publicly provided in the supplied documents. The initial description notes a reflected XSS in 10Web Slider, but there are no connected documents with affected versions, exploitation vectors, remediation steps, or verification data.

7.1CVSS5.2AI score0.00522EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder