Lucene search
+L

27 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2022-52279

Malicious code in bioql PyPI...

5.4CVSS5.1AI score0.00324EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2023-43308

Malicious code in bioql PyPI...

5.4CVSS5.8AI score0.00527EPSS
SaveExploits1References2
NVD
NVD
•added 2024/02/07 5:15 a.m.•35 views

CVE-2024-0256

The Starbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Profile Display Name and Social Settings in all versions up to, and including, 3.4.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS5.7AI score0.0032EPSS
SaveExploits0References2
OSV
OSV
•added 2024/02/07 5:15 a.m.•13 views

CVE-2024-0256

The Starbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Profile Display Name and Social Settings in all versions up to, and including, 3.4.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

5.4CVSS7.4AI score0.0032EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/02/07 12:00 a.m.•16 views

WordPress Plugin Starbox Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.4CVSS6AI score0.0032EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/07 12:00 a.m.•2 views

CVE-2024-0256: Improper Neutralization of Input During Web Page Generation

The Starbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Profile Display Name and Social Settings in all versions up to, and including, 3.4.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS6AI score0.0032EPSS
SaveExploits0References3
NVD
NVD
•added 2023/08/22 7:16 p.m.•23 views

CVE-2023-39599

Cross-Site Scripting XSS vulnerability in CSZ CMS v.1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Social Settings parameter...

5.4CVSS5.3AI score0.00527EPSS
SaveExploits1References2
OSV
OSV
•added 2023/08/22 7:16 p.m.•14 views

CVE-2023-39599

Cross-Site Scripting XSS vulnerability in CSZ CMS v.1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Social Settings parameter...

5.4CVSS6.2AI score0.00527EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/08/22 7:16 p.m.•7 views

CVE-2023-39599

Cross-Site Scripting XSS vulnerability in CSZ CMS v.1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Social Settings parameter...

5.4CVSS6.2AI score0.00527EPSS
SaveExploits1References3
Prion
Prion
•added 2023/08/22 7:16 p.m.•22 views

Cross site scripting

Cross-Site Scripting XSS vulnerability in CSZ CMS v.1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Social Settings parameter...

4.9CVSS5.4AI score0.00527EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/08/22 12:00 a.m.•19 views

CVE-2023-39599

Cross-Site Scripting XSS vulnerability in CSZ CMS v.1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Social Settings parameter...

6.1AI score0.00527EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/22 12:00 a.m.•6 views

CVE-2023-39599: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability in CSZ CMS v.1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Social Settings parameter...

5.4CVSS6.5AI score0.00527EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/08/22 12:00 a.m.•12 views

PT-2023-27031 · Csz Cms · Csz Cms

Name of the Vulnerable Software and Affected Versions: CSZ CMS version 1.3.0 Description: A Cross-Site Scripting XSS issue allows attackers to execute arbitrary code via a crafted payload to the Social Settings parameter. This enables attackers to potentially manipulate the website's behavior...

5.4CVSS6.6AI score0.00527EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2023/08/22 12:00 a.m.•38 views

CVE-2023-39599

Cross-Site Scripting XSS vulnerability in CSZ CMS v.1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Social Settings parameter...

5.5AI score0.00527EPSS
SaveExploits1References1
CVE
CVE
•added 2023/08/22 12:00 a.m.•53 views

CVE-2023-39599

CVE-2023-39599 affects CSZ CMS v1.3.0. The data shows a Cross-Site Scripting (XSS) vulnerability in the Social Settings parameter that can be exploited by a crafted payload to execute arbitrary code. Reported metrics indicate low confidentiality and integrity impact with no availability impact, a...

5.4CVSS5.3AI score0.00527EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2023/08/22 12:00 a.m.•14 views

CSZ CMS 跨站脚本漏洞

CSZ CMS is an open source PHP-based content management system CMS. A cross-site scripting vulnerability exists in CSZ CMS version v.1.3.0, which stems from a vulnerability that allows an attacker to execute arbitrary code via the Social Settings parameter using a crafted payload...

5.4CVSS5.9AI score0.00527EPSS
SaveExploits1References3
NVD
NVD
•added 2022/07/21 5:15 p.m.•33 views

CVE-2022-30337

Cross-Site Request Forgery CSRF vulnerability in JoomUnited WP Meta SEO plugin = 4.4.8 at WordPress allows an attacker to update the social settings...

5.4CVSS0.00324EPSS
SaveExploits0References2
OSV
OSV
•added 2022/07/21 5:15 p.m.•19 views

CVE-2022-30337

Cross-Site Request Forgery CSRF vulnerability in JoomUnited WP Meta SEO plugin = 4.4.8 at WordPress allows an attacker to update the social settings...

4.3CVSS5.8AI score0.00324EPSS
SaveExploits0References2
Prion
Prion
•added 2022/07/21 5:15 p.m.•26 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in JoomUnited WP Meta SEO plugin = 4.4.8 at WordPress allows an attacker to update the social settings...

4.3CVSS4.7AI score0.00324EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2022/07/21 4:02 p.m.•16 views

CVE-2022-30337 WordPress WP Meta SEO plugin <= 4.4.8 - Social Settings Update vis Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in JoomUnited WP Meta SEO plugin = 4.4.8 at WordPress allows an attacker to update the social settings...

5.4CVSS5.5AI score0.00324EPSS
SaveExploits0References2
Rows per page
Query Builder