Lucene search
+L

1492 matches found

CNNVD
CNNVD
•added 2023/12/29 12:00 a.m.•15 views

WordPress Plugin Stock Ticker Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.5CVSS6AI score0.00328EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/29 12:00 a.m.•4 views

CVE-2023-51541: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aleksandar Urošević Stock Ticker allows Stored XSS.This issue affects Stock Ticker: from n/a through 3.23.4...

6.5CVSS6AI score0.00328EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2023/12/27 12:00 a.m.•19 views

WordPress Stock Ticker Plugin <= 3.23.4 is vulnerable to Cross Site Scripting (XSS)

Software Stock Ticker Type Plugin Vulnerable versions = 3.23.4 Fixed in 3.23.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-51541 Patch priority Low CVSS severity Low 6.5 Developer Aleksandar Urošević PSID c401edb337f9 Credits resecured.io Required privilege...

6.5CVSS6.5AI score0.00328EPSS
SaveExploits0References2Affected Software1
Openbugbounty
Openbugbounty
•added 2023/12/25 8:33 p.m.•4 views

stock-world.de Cross Site Scripting vulnerability OBB-3823243

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
OSV
OSV
•added 2023/12/14 3:15 p.m.•17 views

CVE-2022-45365

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aleksandar Urošević Stock Ticker allows Reflected XSS.This issue affects Stock Ticker: from n/a through 3.23.2...

6.1CVSS5.8AI score0.48879EPSS
SaveExploits0References1
NVD
NVD
•added 2023/12/14 3:15 p.m.•28 views

CVE-2022-45365

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aleksandar Urošević Stock Ticker allows Reflected XSS.This issue affects Stock Ticker: from n/a through 3.23.2...

7.1CVSS0.48879EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/14 3:15 p.m.•28 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aleksandar Uroševic Stock Ticker allows Reflected XSS.This issue affects Stock Ticker: from n/a through 3.23.2...

5.8CVSS6.3AI score0.48879EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/12/14 2:46 p.m.•93 views

CVE-2022-45365

The CVE-2022-45365 entry concerns the WordPress Stock Ticker plugin (versions up to 3.23.2). It is a Reflected XSS caused by improper input handling during Web page generation, via endpoints such as ajax_stockticker_symbol_search_test and related load/search paths. An unauthenticated user can tri...

7.1CVSS7.1AI score0.48879EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/12/14 2:46 p.m.•73 views

CVE-2022-45365 WordPress Stock Ticker Plugin <= 3.23.2 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aleksandar Urošević Stock Ticker allows Reflected XSS.This issue affects Stock Ticker: from n/a through 3.23.2...

7.1CVSS7.1AI score0.48879EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/12/14 12:00 a.m.•15 views

WordPress Plugin Stock Ticker Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

7.1CVSS6AI score0.48879EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/12/14 12:00 a.m.•14 views

PT-2023-14653 · Unknown · Aleksandar Urošević Stock Ticker

Name of the Vulnerable Software and Affected Versions: Aleksandar Urošević Stock Ticker versions 3.23.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected cross-site scripting XSS. This means an attacker can...

7.1CVSS6.5AI score0.48879EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/14 12:00 a.m.•3 views

CVE-2022-45365: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aleksandar Urošević Stock Ticker allows Reflected XSS.This issue affects Stock Ticker: from n/a through 3.23.2...

7.1CVSS7.1AI score0.48879EPSS
SaveExploits0References2
Schneier on Security
Schneier on Security
•added 2023/12/01 12:03 p.m.•14 views

AI Decides to Engage in Insider Trading

A stock-trading AI a simulated experiment engaged in insider trading, even though it "knew" it was wrong. The agent is put under pressure in three ways. First, it receives a email from its "manager" that the company is not doing well and needs better performance in the next quarter. Second, the...

7.2AI score
SaveExploits0
OSV
OSV
•added 2023/11/30 3:15 p.m.•13 views

CVE-2023-37972

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in MultiVendorX Product Stock Manager & Notifier for WooCommerce.This issue affects Product Stock Manager & Notifier for WooCommerce: from n/a through 2.0.1...

7.5CVSS7.3AI score0.00667EPSS
SaveExploits0References1
NVD
NVD
•added 2023/11/30 3:15 p.m.•35 views

CVE-2023-37972

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in MultiVendorX Product Stock Manager & Notifier for WooCommerce.This issue affects Product Stock Manager & Notifier for WooCommerce: from n/a through 2.0.1...

7.5CVSS0.00667EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/30 3:15 p.m.•20 views

Code injection

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in MultiVendorX Product Stock Manager & Notifier for WooCommerce.This issue affects Product Stock Manager & Notifier for WooCommerce: from n/a through 2.0.1...

5CVSS7.1AI score0.00667EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/11/30 3:07 p.m.•51 views

CVE-2023-37972

CVE-2023-37972 – Information Disclosure in WordPress plugin “WooCommerce Product Stock Alert / Product Stock Manager & Notifier for WooCommerce” Affected software: Product Stock Manager & Notifier for WooCommerce (WordPress plugin) — commonly listed as WooCommerce Product Stock Alert. Root cause ...

7.5CVSS7.7AI score0.00667EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/11/30 3:07 p.m.•39 views

CVE-2023-37972 WordPress WooCommerce Product Stock Alert Plugin <= 2.0.1 is vulnerable to Sensitive Data Exposure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in MultiVendorX Product Stock Manager & Notifier for WooCommerce.This issue affects Product Stock Manager & Notifier for WooCommerce: from n/a through 2.0.1...

5.3CVSS7.7AI score0.00667EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/30 12:00 a.m.•4 views

CVE-2023-37972: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in MultiVendorX Product Stock Manager & Notifier for WooCommerce.This issue affects Product Stock Manager & Notifier for WooCommerce: from n/a through 2.0.1...

7.5CVSS7.5AI score0.00667EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/11/30 12:00 a.m.•11 views

WordPress Plugin Product Stock Manager & Notifier for WooCommerce Information Disclosure Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Product Stock Manager &...

7.5CVSS6.3AI score0.00667EPSS
SaveExploits0References1
Rows per page
Query Builder