Lucene search
+L

1492 matches found

Cvelist
Cvelist
•added 2025/03/26 2:24 p.m.•32 views

CVE-2025-26566 WordPress In Stock Mailer for WooCommerce Plugin <= 2.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Frank In Stock Mailer for WooCommerce in-stock-mailer-for-woocommerce allows Reflected XSS.This issue affects In Stock Mailer for WooCommerce: from n/a through = 2.1.1...

7.1CVSS0.00374EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/26 12:00 a.m.•18 views

WordPress plugin In Stock Mailer for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS8.1AI score0.00374EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/26 12:00 a.m.•4 views

CVE-2025-26566: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Frank In Stock Mailer for WooCommerce in-stock-mailer-for-woocommerce allows Reflected XSS.This issue affects In Stock Mailer for WooCommerce: from n/a through = 2.1.1...

7.1CVSS5.8AI score0.00374EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/26 12:00 a.m.•4 views

PT-2025-12922

Name of the Vulnerable Software and Affected Versions In Stock Mailer for WooCommerce versions 2.1.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...

7.1CVSS0.00374EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2025/03/11 11:47 a.m.•20 views

WordPress In Stock Mailer for WooCommerce Plugin <= 2.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin In Stock Mailer for WooCommerce versions = 2.1.1...

7.1CVSS6.1AI score0.00374EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/03/05 3:29 p.m.•12 views

CVE-2025-25090

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dreamstime Dreamstime Stock Photos dreamstime-stock-photos allows Reflected XSS.This issue affects Dreamstime Stock Photos: from n/a through = 4.1...

7.1CVSS5.9AI score0.00393EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/03 2:15 p.m.•12 views

CVE-2025-25090

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dreamstime Dreamstime Stock Photos dreamstime-stock-photos allows Reflected XSS.This issue affects Dreamstime Stock Photos: from n/a through = 4.1...

7.1CVSS0.00393EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/03 1:30 p.m.•70 views

CVE-2025-25090

CVE-2025-25090 affects the WordPress Dreamstime Stock Photos plugin (versions ≤ 4.1). Root cause: improper input neutralization during web page generation, causing a reflected XSS. Impact per sources: possible leakage or modification of user data via a reflected cross-site scripting attack; explo...

7.1CVSS5.9AI score0.00393EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/03 1:30 p.m.•7 views

CVE-2025-25090 WordPress Dreamstime Stock Photos plugin <= 4.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dreamstime Dreamstime Stock Photos dreamstime-stock-photos allows Reflected XSS.This issue affects Dreamstime Stock Photos: from n/a through = 4.1...

7.1CVSS5.2AI score0.00393EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/03 1:30 p.m.•23 views

CVE-2025-25090 WordPress Dreamstime Stock Photos plugin <= 4.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dreamstime Dreamstime Stock Photos dreamstime-stock-photos allows Reflected XSS.This issue affects Dreamstime Stock Photos: from n/a through = 4.1...

7.1CVSS0.00393EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/03 12:00 a.m.•13 views

WordPress plugin Dreamstime Stock Photos 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS5.8AI score0.00393EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/03/03 12:00 a.m.•10 views

PT-2025-9431 · Dreamstime · Dreamstime Stock Photos

Name of the Vulnerable Software and Affected Versions: Dreamstime Stock Photos versions n/a through 4.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For versions n/a...

7.1CVSS5.8AI score0.00393EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•4 views

CVE-2025-25090: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dreamstime Dreamstime Stock Photos dreamstime-stock-photos allows Reflected XSS.This issue affects Dreamstime Stock Photos: from n/a through = 4.1...

7.1CVSS5.8AI score0.00393EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/14 4:43 a.m.•15 views

CVE-2024-36779

Sourcecodester Stock Management System v1.0 is vulnerable to SQL Injection via editCategories.php...

9.8CVSS8AI score0.00572EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/02/12 12:32 a.m.•13 views

CVE-2024-57178

An SQL injection vulnerability exists in Stock-Forecaster =01-04-2020. By sending a specially crafted 'stock-symbol' parameter to the portofolio endpoint, it is possible to trigger an SQL injection in the application. As a result, the attacker will be able the user data or manipulate the software...

5.9CVSS7.7AI score0.00208EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/10 8:15 p.m.•18 views

CVE-2024-57178

An SQL injection vulnerability exists in Stock-Forecaster =01-04-2020. By sending a specially crafted 'stock-symbol' parameter to the portofolio endpoint, it is possible to trigger an SQL injection in the application. As a result, the attacker will be able the user data or manipulate the software...

5.9CVSS0.00208EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/02/10 12:00 a.m.•10 views

CVE-2024-57178

An SQL injection vulnerability exists in Stock-Forecaster =01-04-2020. By sending a specially crafted 'stock-symbol' parameter to the portofolio endpoint, it is possible to trigger an SQL injection in the application. As a result, the attacker will be able the user data or manipulate the software...

6AI score0.00208EPSS
SaveExploits0References2
CVE
CVE
•added 2025/02/10 12:00 a.m.•56 views

CVE-2024-57178

An SQL injection vulnerability exists in Stock-Forecaster versions

5.9CVSS6AI score0.00208EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/02/10 12:00 a.m.•24 views

CVE-2024-57178

An SQL injection vulnerability exists in Stock-Forecaster =01-04-2020. By sending a specially crafted 'stock-symbol' parameter to the portofolio endpoint, it is possible to trigger an SQL injection in the application. As a result, the attacker will be able the user data or manipulate the software...

0.00208EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/10 12:00 a.m.•2 views

CVE-2024-57178: Improper Neutralization of Special Elements used in an SQL Command

An SQL injection vulnerability exists in Stock-Forecaster =01-04-2020. By sending a specially crafted 'stock-symbol' parameter to the portofolio endpoint, it is possible to trigger an SQL injection in the application. As a result, the attacker will be able the user data or manipulate the software...

5.9CVSS5.8AI score0.00208EPSS
SaveExploits0References1
Rows per page
Query Builder