Lucene search
+L

919 matches found

Patchstack
Patchstack
added 2024/12/12 12:27 a.m.6 views

WordPress Horizontal scroll image slideshow plugin <= 10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Horizontal scroll image slideshow versions = 10.1...

6.4CVSS5.7AI score0.00438EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/12/12 12:0 a.m.7 views

WordPress plugin Horizontal scroll image slideshow 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

6.4CVSS7.5AI score0.00438EPSS
SaveExploits0References3
NVD
NVD
added 2024/12/02 2:15 p.m.19 views

CVE-2024-52492

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gopiplus Image horizontal reel scroll slideshow image-horizontal-reel-scroll-slideshow allows Stored XSS.This issue affects Image horizontal reel scroll slideshow: from n/a through = 13.4...

5.9CVSS0.00306EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/02 1:48 p.m.21 views

CVE-2024-52492 WordPress Image horizontal reel scroll slideshow plugin <= 13.4 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gopiplus Image horizontal reel scroll slideshow image-horizontal-reel-scroll-slideshow allows Stored XSS.This issue affects Image horizontal reel scroll slideshow: from n/a through = 13.4...

5.9CVSS0.00306EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/02 1:48 p.m.43 views

CVE-2024-52492

CVE-2024-52492 details a Stored Cross-Site Scripting (XSS) flaw in the WordPress plugin Image horizontal reel scroll slideshow (versions

5.9CVSS7.2AI score0.00306EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/02 12:0 a.m.9 views

PT-2024-35333 · Unknown · Gopi Ramasamy Image Horizontal Reel Scroll Slideshow

Name of the Vulnerable Software and Affected Versions: Gopi Ramasamy Image horizontal reel scroll slideshow versions prior to 13.4 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Stored XSS...

5.9CVSS9.2AI score0.00306EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/11/20 12:0 a.m.8 views

WordPress Image horizontal reel scroll slideshow Plugin <= 13.4 is vulnerable to Cross Site Scripting (XSS)

Software Image horizontal reel scroll slideshow Type Plugin Vulnerable versions = 13.4 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Cross Site Scripting XSS CVE CVE-2024-52492 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID f3bd39fc0f00 Credits UKO Required...

6.2AI score0.00306EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/11/19 5:15 p.m.43 views

CVE-2024-51914

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gopiplus drop in image slideshow gallery drop-in-image-slideshow-gallery allows DOM-Based XSS.This issue affects drop in image slideshow gallery: from n/a through = 12.0...

6.5CVSS0.00285EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/19 5:15 p.m.22 views

CVE-2024-51632

Cross-Site Request Forgery CSRF vulnerability in Sam Hoe SH Slideshow sh-slideshow allows Stored XSS.This issue affects SH Slideshow: from n/a through = 4.3...

7.1CVSS0.00194EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/19 4:32 p.m.11 views

CVE-2024-51632 WordPress SH Slideshow plugin <= 4.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Sam Hoe SH Slideshow sh-slideshow allows Stored XSS.This issue affects SH Slideshow: from n/a through = 4.3...

7.1CVSS5.9AI score0.00194EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/19 4:32 p.m.35 views

CVE-2024-51632 WordPress SH Slideshow plugin <= 4.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Sam Hoe SH Slideshow sh-slideshow allows Stored XSS.This issue affects SH Slideshow: from n/a through = 4.3...

7.1CVSS0.00194EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/19 4:32 p.m.50 views

CVE-2024-51632

CVE-2024-51632: SH Slideshow WordPress plugin

7.1CVSS5.9AI score0.00194EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/19 4:31 p.m.11 views

CVE-2024-51914 WordPress drop in image slideshow gallery plugin <= 12.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gopi Ramasamy drop in image slideshow gallery allows DOM-Based XSS.This issue affects drop in image slideshow gallery: from n/a through 12.0...

6.5CVSS6.9AI score0.00285EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/19 4:31 p.m.53 views

CVE-2024-51914

CVE-2024-51914: WordPress plugin drop in image slideshow gallery (pre-12.0) has a DOM-based XSS vulnerability due to improper input neutralization during page generation. Exploitation details are not provided in the documents, but CVSS notes indicate network access with low attack complexity and ...

6.5CVSS7.2AI score0.00285EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/19 4:31 p.m.36 views

CVE-2024-51914 WordPress drop in image slideshow gallery plugin <= 12.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gopiplus drop in image slideshow gallery drop-in-image-slideshow-gallery allows DOM-Based XSS.This issue affects drop in image slideshow gallery: from n/a through = 12.0...

6.5CVSS0.00285EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/19 12:0 a.m.4 views

WordPress plugin SH Slideshow 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

7.1CVSS6.5AI score0.00194EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/19 12:0 a.m.5 views

PT-2024-34776 · Unknown · Sh Slideshow

Name of the Vulnerable Software and Affected Versions: SH Slideshow versions prior to 4.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions prior to 4.3, update to a version that includes a fix for this issue. As a...

7.1CVSS7AI score0.00194EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/11/19 12:0 a.m.7 views

PT-2024-35047 · Unknown · Drop In Image Slideshow Gallery

Name of the Vulnerable Software and Affected Versions: drop in image slideshow gallery versions prior to 12.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based Cross-site Scripting XSS. This means that an attacker could...

6.5CVSS6.5AI score0.00285EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/11/19 12:0 a.m.8 views

WordPress plugin drop in image slideshow gallery 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

6.5CVSS7.4AI score0.00285EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/16 4:15 a.m.43 views

CVE-2024-9839

The The Uix Slideshow plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.6.5. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible for...

7.3CVSS0.00577EPSS
SaveExploits0References2
Rows per page
Query Builder