Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/11/12 3:47 a.m.9 views

CVE-2025-12631

The Squirrels Auto Inventory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

4.4CVSS4.9AI score0.00168EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/11 6:30 a.m.3 views

EUVD-2025-60938

The Squirrels Auto Inventory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

4.4CVSS4.6AI score0.00168EPSS
Exploits0References3
CVE
CVE
added 2025/11/11 3:30 a.m.18 views

CVE-2025-12631

CVE-2025-12631 affects the WordPress plugin Squirrels Auto Inventory (versions

4.4CVSS4.7AI score0.00168EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/11/11 3:30 a.m.5 views

CVE-2025-12631 Squirrels Auto Inventory <= 1.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting

The Squirrels Auto Inventory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

4.4CVSS4.6AI score0.00168EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.6 views

PT-2025-46280

Name of the Vulnerable Software and Affected Versions Squirrels Auto Inventory plugin for WordPress versions up to and including 1.0.3 Description The software is susceptible to Stored Cross-Site Scripting through the admin settings. This is due to inadequate input sanitization and output escapin...

4.4CVSS5.2AI score0.00168EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/11/11 12:0 a.m.2 views

WordPress plugin Squirrels Auto Inventory 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

4.4CVSS5.7AI score0.00168EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/11/10 10:53 p.m.6 views

WordPress Squirrels Auto Inventory plugin <= 1.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by Ivan Cese in WordPress Plugin Squirrels Auto Inventory versions = 1.0.3...

4.4CVSS5.5AI score0.00168EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder