Lucene search
+L

4663 matches found

CNNVD
CNNVD
added 2024/04/03 12:00 a.m.13 views

WordPress Plugin LayerSlider SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

9.8CVSS7.9AI score0.18402EPSS
SaveExploits1References3
WPVulnDB
WPVulnDB
added 2024/04/03 12:00 a.m.15 views

Creative Image Slider – Responsive Slider Plugin < 2.5.0 - Reflected Cross-Site Scripting

Description The Creative Image Slider – Responsive Slider Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 2.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

7.1CVSS6.3AI score0.00375EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2024/04/03 12:00 a.m.17 views

B Slider - Slider for your block editor < 1.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The B Slider - Slider for your block editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.1.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level...

6.5CVSS5.8AI score0.00331EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2024/04/03 12:00 a.m.11 views

Header Image Slider <= 0.3 - Reflected Cross-Site Scripting

Description The Header Image Slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 0.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

6.5AI score0.0019EPSS
SaveExploits0References1
WPVulnDB
WPVulnDB
added 2024/04/01 12:00 a.m.22 views

Post Grid, Slider & Carousel Ultimate < 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The Post Grid, Slider & Carousel Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.6.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level...

6.5CVSS5.8AI score0.00336EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/03/31 7:15 p.m.32 views

CVE-2024-31106

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yooslider Yoo Slider allows Reflected XSS.This issue affects Yoo Slider: from n/a through 2.1.1...

7.1CVSS6.9AI score0.00395EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/31 7:06 p.m.41 views

CVE-2024-31106 WordPress Yoo Slider – Image Slider & Video Slider plugin <= 2.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yooslider Yoo Slider allows Reflected XSS.This issue affects Yoo Slider: from n/a through 2.1.1...

7.1CVSS7.1AI score0.00395EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/31 7:06 p.m.21 views

CVE-2024-31106 WordPress Yoo Slider – Image Slider & Video Slider plugin <= 2.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yooslider Yoo Slider allows Reflected XSS.This issue affects Yoo Slider: from n/a through 2.1.1...

7.1CVSS6.9AI score0.00395EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/31 7:06 p.m.71 views

CVE-2024-31106

Technical details about CVE-2024-31106 are not provided in the supplied documents; no affected versions, root cause specifics, or remediation information are included here. Monitor for updates.

7.1CVSS8.6AI score0.00395EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/03/31 12:00 a.m.20 views

PT-2024-23775 · Unknown · Yoo Slider

Name of the Vulnerable Software and Affected Versions: Yoo Slider versions through 2.1.1 Description: The issue affects Yoo Slider, allowing Reflected XSS due to improper neutralization of input during web page generation. Recommendations: For versions through 2.1.1, update to a version that...

7.1CVSS9.2AI score0.00395EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/31 12:00 a.m.8 views

WordPress Plugin Yoo Slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Yoo Slider A...

7.1CVSS7.6AI score0.00395EPSS
SaveExploits0References3
NVD
NVD
added 2024/03/29 6:15 p.m.20 views

CVE-2024-30443

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GS Plugins GS Testimonial Slider allows Stored XSS.This issue affects GS Testimonial Slider: from n/a through 3.1.4...

6.5CVSS6.4AI score0.0036EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/29 6:15 p.m.18 views

CVE-2024-30432

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins B Slider - Slider for your block editor allows Stored XSS.This issue affects B Slider - Slider for your block editor: from n/a through 1.1.12...

6.5CVSS6.5AI score0.00331EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/29 5:31 p.m.31 views

CVE-2024-30432 WordPress B Slider plugin <= 1.1.12 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins B Slider - Slider for your block editor allows Stored XSS.This issue affects B Slider - Slider for your block editor: from n/a through 1.1.12...

6.5CVSS6.6AI score0.00331EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/29 5:31 p.m.70 views

CVE-2024-30432

CVE-2024-30432: B Slider – Slider for your block editor (WordPress) is affected by a Stored XSS due to improper neutralization of input during web page generation. Affected versions: up to 1.1.12 (no details on exact vulnerable input provided). The entry is marked as patched; remediation is to up...

6.5CVSS8.6AI score0.00331EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/29 5:15 p.m.35 views

CVE-2024-30448

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Supsystic Slider by Supsystic allows Stored XSS.This issue affects Slider by Supsystic: from n/a through 1.8.10...

5.9CVSS5.7AI score0.00359EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/29 5:15 p.m.19 views

CVE-2024-30447

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative Solutions Creative Image Slider – Responsive Slider Plugin allows Reflected XSS.This issue affects Creative Image Slider – Responsive Slider Plugin: from n/a through 2.1.3...

7.1CVSS6.9AI score0.00375EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/29 5:11 p.m.16 views

CVE-2024-30443 WordPress GS Testimonial Slider plugin <= 3.1.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GS Plugins GS Testimonial Slider allows Stored XSS.This issue affects GS Testimonial Slider: from n/a through 3.1.4...

6.5CVSS6.7AI score0.0036EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/29 5:11 p.m.25 views

CVE-2024-30443 WordPress GS Testimonial Slider plugin <= 3.1.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GS Plugins GS Testimonial Slider allows Stored XSS.This issue affects GS Testimonial Slider: from n/a through 3.1.4...

6.5CVSS6.6AI score0.0036EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/29 5:11 p.m.77 views

CVE-2024-30443

CVE-2024-30443: Stored XSS in GS Testimonial Slider WordPress plugin. Affected: GS Testimonial Slider, versions up to 3.1.4. Issue arises from improper handling/sanitization of input during web page generation, allowing malicious scripts to be stored and executed in pages using the plugin. Connec...

6.5CVSS8.6AI score0.0036EPSS
SaveExploits0References1
Rows per page
Query Builder