Lucene search
+L

1492 matches found

NVD
NVD
•added 2023/09/04 11:15 a.m.•48 views

CVE-2023-40208

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Aleksandar Urošević Stock Ticker plugin = 3.23.3 versions...

7.1CVSS6.2AI score0.00726EPSS
SaveExploits0References1
Prion
Prion
•added 2023/09/04 11:15 a.m.•26 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Aleksandar Uroševi? Stock Ticker plugin = 3.23.3 versions...

5.8CVSS6AI score0.00726EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/09/04 10:40 a.m.•16 views

CVE-2023-40208 WordPress Stock Ticker Plugin <= 3.23.3 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Aleksandar Urošević Stock Ticker plugin = 3.23.3 versions...

7.1CVSS5.8AI score0.00726EPSS
SaveExploits0References1
CVE
CVE
•added 2023/09/04 10:40 a.m.•103 views

CVE-2023-40208

CVE-2023-40208 concerns the WordPress Stock Ticker plugin. Connected sources describe a Reflected Cross-Site Scripting (XSS) vulnerability in the ajax_stockticker_load function for versions up to and including 3.23.3, caused by insufficient input sanitization and output escaping. Exploitation is ...

7.1CVSS6AI score0.00726EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/09/04 10:40 a.m.•40 views

CVE-2023-40208 WordPress Stock Ticker Plugin <= 3.23.3 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Aleksandar Urošević Stock Ticker plugin = 3.23.3 versions...

7.1CVSS6.4AI score0.00726EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/09/04 12:00 a.m.•18 views

WordPress plugin Stock Ticker Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

7.1CVSS6.2AI score0.00726EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/09/04 12:00 a.m.•23 views

PT-2023-27326 · Unknown · Aleksandar Urošević Stock Ticker

Name of the Vulnerable Software and Affected Versions: Aleksandar Urošević Stock Ticker plugin versions = 3.23.3 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a...

7.1CVSS6.1AI score0.00726EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/04 12:00 a.m.•2 views

CVE-2023-40208: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Aleksandar Urošević Stock Ticker plugin = 3.23.3 versions...

7.1CVSS7.1AI score0.00726EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2023/09/04 12:00 a.m.•26 views

WordPress Stock Quotes List Plugin <= 2.9.11 is vulnerable to Cross Site Scripting (XSS)

Software Stock Quotes List Type Plugin Vulnerable versions = 2.9.11 Fixed in 2.9.12 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-41666 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8915def85604 Credits deokhunKim Required...

6.5CVSS5.7AI score0.00361EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2023/08/18 1:15 p.m.•16 views

CVE-2023-31094

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Lauri Karisola / WP Trio Stock Sync for WooCommerce plugin = 2.4.0 versions...

6.1CVSS7.3AI score0.00382EPSS
SaveExploits0References1
NVD
NVD
•added 2023/08/18 1:15 p.m.•33 views

CVE-2023-31094

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Lauri Karisola / WP Trio Stock Sync for WooCommerce plugin = 2.4.0 versions...

7.1CVSS6.3AI score0.00382EPSS
SaveExploits0References1
CVE
CVE
•added 2023/08/18 12:50 p.m.•73 views

CVE-2023-31094

CVE-2023-31094: unauthenticated reflected XSS in Stock Sync for WooCommerce (WordPress plugin) versions &lt;= 2.4.0. Root cause: vulnerability in input handling that allows injection of script via page parameter, leading to potential cookie/session data exposure or defacement as described in mult...

7.1CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2023/08/18 12:00 a.m.•9 views

Stock Sync for WooCommerce < 2.4.1 - Reflected XSS

Description The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS5.7AI score0.00382EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/18 12:00 a.m.•4 views

CVE-2023-31094: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Lauri Karisola / WP Trio Stock Sync for WooCommerce plugin = 2.4.0 versions...

7.1CVSS7.1AI score0.00382EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/08/18 12:00 a.m.•17 views

WordPress plugin Stock Sync for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6.9AI score0.00382EPSS
SaveExploits0References2
OSV
OSV
•added 2023/08/16 11:15 a.m.•14 views

CVE-2023-30871

Unauth. Reflected Cross-Site Scripting XSS vulnerability in PT Woo Plugins by Webdados Stock Exporter for WooCommerce plugin = 1.1.0 versions...

6.1CVSS7.3AI score0.00382EPSS
SaveExploits0References1
CVE
CVE
•added 2023/08/16 10:10 a.m.•49 views

CVE-2023-30871

CVE-2023-30871 affects the WordPress plugin Stock Exporter for WooCommerce by PT Woo Plugins (by Webdados). On versions = 1.2.0. If upgrading immediately is not possible, apply vendor-supplied mitigations/patches where available and ensure input/output handling adheres to secure coding practices....

7.1CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/08/16 10:10 a.m.•13 views

CVE-2023-30871 WordPress Stock Exporter for WooCommerce Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in PT Woo Plugins by Webdados Stock Exporter for WooCommerce plugin = 1.1.0 versions...

7.1CVSS5.9AI score0.00382EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/16 12:00 a.m.•4 views

CVE-2023-30871: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in PT Woo Plugins by Webdados Stock Exporter for WooCommerce plugin = 1.1.0 versions...

7.1CVSS6.4AI score0.00382EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/08/16 12:00 a.m.•6 views

PT-2023-23026

Name of the Vulnerable Software and Affected Versions PT Woo Plugins by Webdados Stock Exporter for WooCommerce plugin versions 1.1.0 and earlier Description The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the...

7.1CVSS5.8AI score0.00382EPSS
SaveExploits0References6
Rows per page
Query Builder