Lucene search
K

192 matches found

CNNVD
CNNVD
added 2026/04/04 12:0 a.m.7 views

WordPress plugin Royal Addons for Elementor 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

6.4CVSS5.7AI score0.00293EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/04/03 12:0 a.m.8 views

emlog 跨站脚本漏洞

Emlog is an open-source CMS website building system based on PHP and MySQL. Versions of Emlog prior to 2.6.8 had a cross-site scripting vulnerability. This vulnerability stemmed from a storage-based cross-site script in the comment module, which could lead to cross-site scripting attacks...

6.1CVSS5.6AI score0.0023EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/04/01 12:0 a.m.3 views

CI4MS 跨站脚本漏洞

CI4MS is an open-source blog page management tool developed by Ci4MS. Versions of CI4MS prior to 0.31.0.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from improper handling of user input when creating or editing blog articles in the category section, which could lea...

9.1CVSS5.7AI score0.00269EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/04/01 12:0 a.m.3 views

CI4MS 跨站脚本漏洞

CI4MS is an open-source blog page management tool developed by Ci4MS. Versions of CI4MS prior to 0.31.0.0 contained a cross-site scripting vulnerability. This vulnerability occurred due to improper handling of user input when creating or editing blog categories, which could lead to storage-based...

9.9CVSS5.7AI score0.00324EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/04/01 12:0 a.m.6 views

CI4MS 跨站脚本漏洞

CI4MS is an open-source blog page management tool developed by Ci4MS. Versions of CI4MS prior to 0.31.0.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from improper cleanup of user inputs when creating or editing pages within the page management functionality, which...

9.1CVSS5.6AI score0.00269EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/04/01 12:0 a.m.2 views

Payload 跨站脚本漏洞

Payload is a headless CMS and application framework built using TypeScript, Node.js, React, and MongoDB. Versions of Payload prior to 3.78.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from improper cleaning of user inputs in the administration panel, which could le...

8.7CVSS5.7AI score0.00286EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/01 12:0 a.m.5 views

CI4MS 跨站脚本漏洞

CI4MS is an open-source blog page management tool developed by Ci4MS. Versions of CI4MS prior to 0.31.0.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from the improper handling of user input when adding articles to the navigation menu via the menu management feature...

9.1CVSS5.7AI score0.00269EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/04/01 12:0 a.m.5 views

CI4MS 跨站脚本漏洞

CI4MS is an open-source blog page management tool developed by Ci4MS. Versions of CI4MS prior to 0.31.0.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from the failure to properly clean up user-controlled inputs in the system settings – social media management sectio...

8.4CVSS5.6AI score0.00229EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/04/01 12:0 a.m.7 views

CI4MS 跨站脚本漏洞

CI4MS is an open-source blog page management tool developed by Ci4MS. Versions of CI4MS prior to 0.31.0.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from the improper cleaning of user input when adding pages through the menu management feature, which could lead to...

9.1CVSS5.7AI score0.00307EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/03/31 12:0 a.m.5 views

TeamPass 跨站脚本漏洞

TeamPass is an open-source password manager developed by Nils Laumaillé. Versions of TeamPass prior to 3.1.5.16 contained a cross-site scripting vulnerability. This vulnerability stemmed from the password import function not properly cleaning and encoding user input data, which could lead to...

9.3CVSS5.7AI score0.00134EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/30 12:0 a.m.6 views

CI4MS 跨站脚本漏洞

CI4MS is an open-source blog page management tool developed by Ci4MS. Versions of CI4MS prior to 0.31.0.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from improper input handling in the group and role management functions, which could lead to storage-based cross-sit...

9.1CVSS5.7AI score0.00307EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/03/26 12:0 a.m.4 views

SolarWinds Observability Self-Hosted 跨站脚本漏洞

SolarWinds Observability Self-Hosted is an observability platform developed by the American company SolarWinds. SolarWinds Observability Self-Hosted has a cross-site scripting vulnerability, which stems from a storage-based cross-site scripting vulnerability. This vulnerability may lead to...

8.7CVSS5.6AI score0.00368EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/26 12:0 a.m.5 views

WordPress plugin Simple Download Counter 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.4CVSS5.7AI score0.00239EPSS
Exploits0References10
CNNVD
CNNVD
added 2026/03/26 12:0 a.m.12 views

SolarWinds Observability Self-Hosted 跨站脚本漏洞

SolarWinds Observability Self-Hosted is an observability platform developed by the American company SolarWinds. SolarWinds Observability Self-Hosted has a cross-site scripting vulnerability, which stems from a storage-based cross-site scripting vulnerability. This vulnerability may lead to...

8.1CVSS5.6AI score0.00343EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.4 views

WordPress plugin Easy Image Gallery 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.4CVSS5.7AI score0.00187EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.5 views

Cisco IOS XE Software 跨站脚本漏洞

Cisco IOS XE Software is a network operating system developed by the American company Cisco. Cisco IOS XE Software has a cross-site scripting vulnerability, which stems from insufficient user input validation. This vulnerability may lead to storage-based cross-site scripting attacks...

4.8CVSS7.3AI score0.00194EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/21 12:0 a.m.5 views

WordPress plugin Keep Backup Daily 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

4.4CVSS5.7AI score0.00203EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/03/21 12:0 a.m.3 views

WordPress plugin Ed s Font Awesome 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. WordPress...

6.4CVSS5.7AI score0.00243EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/03/21 12:0 a.m.7 views

WordPress plugin Ricerca 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

4.4CVSS5.7AI score0.00154EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/21 12:0 a.m.9 views

WordPress plugin Scoreboard for HTML5 Games Lite 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

6.4CVSS5.7AI score0.00206EPSS
Exploits0References8
Rows per page
Query Builder