Lucene search
K

16 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2024-45598

Malicious code in bioql PyPI...

6.5CVSS8.6AI score0.00197EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:39 a.m.1 views

CVE-2024-51794

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sellerthemes Storely storely allows Stored XSS.This issue affects Storely: from n/a through = 14.7...

6.5CVSS7.2AI score0.00197EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/01/30 3:48 p.m.2 views

WordPress Storely plugin <= 16.6 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by stealthcopter in WordPress Theme Storely versions = 16.6...

6.4CVSS5.8AI score0.00054EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2025/01/30 2:15 p.m.6 views

CVE-2024-10847

The Storely theme for WordPress is vulnerable to Stored Cross-Site Scripting via a malicious display name in all versions up to, and including, 18 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and abov...

6.4CVSS0.00054EPSS
Exploits0References2
OSV
OSV
added 2025/01/30 2:15 p.m.0 views

CVE-2024-10847

The Storely theme for WordPress is vulnerable to Stored Cross-Site Scripting via a malicious display name in all versions up to, and including, 16.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

5.4CVSS7.4AI score
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/01/30 1:42 p.m.6 views

CVE-2024-10847 Storely <= 16.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Storely theme for WordPress is vulnerable to Stored Cross-Site Scripting via a malicious display name in all versions up to, and including, 16.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

6.4CVSS5.7AI score0.00054EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/01/30 1:42 p.m.12 views

CVE-2024-10847 Storely <= 18 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Storely theme for WordPress is vulnerable to Stored Cross-Site Scripting via a malicious display name in all versions up to, and including, 18 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and abov...

6.4CVSS0.00054EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/01/30 12:0 a.m.1 views

WordPress plugin Storely 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

6.4CVSS8.2AI score0.00054EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/01/30 12:0 a.m.2 views

PT-2025-1610 · WordPress · Storely

Name of the Vulnerable Software and Affected Versions: Storely theme for WordPress versions up to and including 16.6 Description: The issue allows authenticated attackers with Contributor-level access and above to inject arbitrary web scripts in pages. This is due to insufficient input sanitizati...

6.4CVSS9.4AI score0.00054EPSS
Exploits0References5
NVD
NVD
added 2024/11/19 5:15 p.m.6 views

CVE-2024-51794

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sellerthemes Storely storely allows Stored XSS.This issue affects Storely: from n/a through = 14.7...

6.5CVSS0.00197EPSS
Exploits0References1
CVE
CVE
added 2024/11/19 4:32 p.m.38 views

CVE-2024-51794

CVE-2024-51794 is a Stored XSS vulnerability in WordPress Storely theme (NotFound Storely) due to improper input neutralization during page generation. Affected versions are reported as from n/a through 14.7. The Connected documents corroborate Cross-Site Scripting via input handling and list Sto...

6.5CVSS7.2AI score0.00197EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/19 4:32 p.m.7 views

CVE-2024-51794 WordPress Storely theme <= 14.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sellerthemes Storely storely allows Stored XSS.This issue affects Storely: from n/a through = 14.7...

6.5CVSS7.2AI score0.00197EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/11/19 12:0 a.m.2 views

PT-2024-34921 · Storely · Storely

Name of the Vulnerable Software and Affected Versions: Storely versions n/a through 14.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For versions n/a...

6.5CVSS5.9AI score0.00197EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/11/19 12:0 a.m.1 views

WordPress plugin Storely 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

6.5CVSS7.7AI score0.00197EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/11/08 11:59 a.m.1 views

WordPress Storely theme <= 14.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Theme Storely versions = 14.7...

6.5CVSS6.1AI score0.00197EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/11/08 12:0 a.m.5 views

WordPress Storely Theme <= 14.7 is vulnerable to Cross Site Scripting (XSS)

Software Storely Type Theme Vulnerable versions = 14.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51794 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 445ba07ef882 Credits stealthcopter Required privilege Contributor...

6.5CVSS6.5AI score0.00197EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder