Lucene search
+L

5685 matches found

Cvelist
Cvelist
•added 2024/10/20 7:53 a.m.•31 views

CVE-2024-49323 WordPress All in One Slider plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shahriar Alam All in One Slider all-in-one-slider allows Reflected XSS.This issue affects All in One Slider: from n/a through = 1.1...

7.1CVSS0.00288EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/20 7:52 a.m.•52 views

CVE-2024-49334 WordPress jLayer Parallax Slider plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Unizoe Web Solutions jLayer Parallax Slider jlayer-parallax-slider-wp allows Reflected XSS.This issue affects jLayer Parallax Slider: from n/a through = 1.0...

7.1CVSS0.00288EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/20 7:52 a.m.•13 views

CVE-2024-49334 WordPress jLayer Parallax Slider plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Unizoe Web Solutions jLayer Parallax Slider jlayer-parallax-slider-wp allows Reflected XSS.This issue affects jLayer Parallax Slider: from n/a through = 1.0...

7.1CVSS5.2AI score0.00288EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/20 7:52 a.m.•87 views

CVE-2024-49334

The CVE-2024-49334 entry relates to the WordPress plugin jLayer Parallax Slider (versions n/a through 1.0). The connected sources indicate the vulnerability is an improper input neutralization during web page generation, resulting in a reflected Cross-Site Scripting (XSS) flaw. Exploitation is de...

7.1CVSS5.9AI score0.00288EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/10/20 12:00 a.m.•17 views

PT-2024-33577 · Unknown · Apa Banner Slider

Name of the Vulnerable Software and Affected Versions: Apa Banner Slider versions n/a through 1.0.0 Description: A Cross-Site Request Forgery CSRF issue in Apa Apa Banner Slider allows SQL Injection. This means an attacker can trick a user into performing unintended actions on the web application...

8.8CVSS8.3AI score0.00233EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2024/10/20 12:00 a.m.•34 views

PT-2024-33475 · Unknown · Jlayer Parallax Slider

Name of the Vulnerable Software and Affected Versions: jLayer Parallax Slider versions n/a through 1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For...

7.1CVSS6.5AI score0.00288EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/20 12:00 a.m.•7 views

CVE-2024-49622: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in aatmaadhikari Apa Banner Slider apa-banner-slider allows SQL Injection.This issue affects Apa Banner Slider: from n/a through = 1.0.0...

8.8CVSS5.8AI score0.00233EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/10/20 12:00 a.m.•20 views

WordPress plugin jLayer Parallax Slider has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

7.1CVSS6.1AI score0.00288EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/10/20 12:00 a.m.•21 views

WordPress plugin All in One Slider has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6.2AI score0.00288EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/10/20 12:00 a.m.•16 views

PT-2024-33464 · Unknown · Sourav All In One Slider

Name of the Vulnerable Software and Affected Versions: Sourav All in One Slider versions n/a through 1.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows Reflected XSS, which can be exploited by...

7.1CVSS5.9AI score0.00288EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/20 12:00 a.m.•5 views

CVE-2024-49334: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Unizoe Web Solutions jLayer Parallax Slider jlayer-parallax-slider-wp allows Reflected XSS.This issue affects jLayer Parallax Slider: from n/a through = 1.0...

7.1CVSS5.8AI score0.00288EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/20 12:00 a.m.•6 views

CVE-2024-49323: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shahriar Alam All in One Slider all-in-one-slider allows Reflected XSS.This issue affects All in One Slider: from n/a through = 1.1...

7.1CVSS5.8AI score0.00288EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/10/20 12:00 a.m.•20 views

WordPress plugin Aapa Banner Slider has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security...

8.8CVSS6.6AI score0.00233EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/10/18 11:32 a.m.•17 views

WordPress Apa Banner Slider plugin <= 1.0.0 - CSRF to SQL Injection vulnerability

CSRF to SQL Injection vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Apa Banner Slider versions = 1.0.0...

8.8CVSS8.1AI score0.00233EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/10/18 10:11 a.m.•21 views

WordPress jLayer Parallax Slider plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin jLayer Parallax Slider versions = 1.0...

7.1CVSS6.1AI score0.00288EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/10/18 12:00 a.m.•26 views

WordPress jLayer Parallax Slider Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software jLayer Parallax Slider Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49334 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 65c219f6d335 Credits João Pedro S Alcântara Kinort...

7.1CVSS6.4AI score0.00288EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/10/18 12:00 a.m.•26 views

WordPress Apa Banner Slider Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Apa Banner Slider Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-49622 Patch priority Low CVSS severity Low 8.2 Developer Claim ownership PSID 3a1fe5097420 Credits João Pedro S...

8.8CVSS8.7AI score0.00233EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2024/10/17 7:16 p.m.•61 views

CVE-2024-49280

CVE-2024-49280 concerns the WordPress plugin “Lightbox slider – Responsive Lightbox Gallery.” The vulnerability is a stored XSS arising from improper neutralization of input during web page generation, enabling stored cross-site scripting in affected pages. The entry states the issue affects vers...

6.5CVSS5.2AI score0.00268EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/17 7:16 p.m.•20 views

CVE-2024-49280 WordPress Lightbox slider -- Responsive Lightbox Gallery plugin <= 1.10.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Weblizar Lightbox slider – Responsive Lightbox Gallery allows Stored XSS.This issue affects Lightbox slider – Responsive Lightbox Gallery: from n/a through 1.10.0...

6.5CVSS6.8AI score0.00268EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/17 7:16 p.m.•36 views

CVE-2024-49280 WordPress Lightbox slider -- Responsive Lightbox Gallery plugin <= 1.10.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Weblizar - WordPress Themes & Plugin Lightbox slider – Responsive Lightbox Gallery simple-lightbox-gallery allows Stored XSS.This issue affects Lightbox slider – Responsive Lightbox Gallery: from n...

6.5CVSS0.00268EPSS
SaveExploits0References1
Rows per page
Query Builder