Lucene search
+L

63 matches found

Cvelist
Cvelist
added 2024/12/12 3:23 a.m.30 views

CVE-2024-11433 Surbma | SalesAutopilot Shortcode <= 2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Surbma | SalesAutopilot Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sa-form' shortcode in all versions up to, and including, 2.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00384EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/12/12 3:23 a.m.15 views

CVE-2024-11433 Surbma | SalesAutopilot Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Surbma | SalesAutopilot Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sa-form' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS5.8AI score0.00384EPSS
SaveExploits0References3
CVE
CVE
added 2024/12/12 3:23 a.m.60 views

CVE-2024-11433

CVE-2024-11433 is a stored XSS vulnerability in the Surbma | SalesAutopilot Shortcode WordPress plugin. It affects all versions up to 2.0, arising from insufficient input sanitization and output escaping on user-supplied attributes in the sa-form shortcode. Exploitation requires authenticated acc...

6.4CVSS7.4AI score0.00384EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/12/12 12:36 a.m.11 views

WordPress Surbma | SalesAutopilot Shortcode plugin <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Surbma | SalesAutopilot Shortcode versions = 2.0...

6.4CVSS5.8AI score0.00384EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/12/12 12:00 a.m.10 views

WordPress plugin Surbma | SalesAutopilot Shortcode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.4CVSS7.8AI score0.00384EPSS
SaveExploits0References3
NVD
NVD
added 2024/11/19 5:15 p.m.22 views

CVE-2024-51798

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Surbma Surbma | Font Awesome surbma-font-awesome allows DOM-Based XSS.This issue affects Surbma | Font Awesome: from n/a through = 3.0...

6.5CVSS0.00367EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/19 4:31 p.m.14 views

CVE-2024-51798 WordPress Surbma | Font Awesome plugin <= 3.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Surbma Surbma | Font Awesome allows DOM-Based XSS.This issue affects Surbma | Font Awesome: from n/a through 3.0...

6.5CVSS6.9AI score0.00367EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/19 4:31 p.m.42 views

CVE-2024-51798 WordPress Surbma | Font Awesome plugin <= 3.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Surbma Surbma | Font Awesome surbma-font-awesome allows DOM-Based XSS.This issue affects Surbma | Font Awesome: from n/a through = 3.0...

6.5CVSS0.00367EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/19 4:31 p.m.69 views

CVE-2024-51798

CVE-2024-51798 affects the WordPress plugin Surbma | Font Awesome (Surbma Font Awesome) up to version 3.0. The issue is a DOM-based XSS caused by improper neutralization of input during web page generation. Impact is cross-site scripting as described; remediation is to upgrade to a patched versio...

6.5CVSS7.2AI score0.00367EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/19 12:00 a.m.8 views

WordPress plugin Surbma | Font Awesome 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.7AI score0.00367EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/11/08 12:13 p.m.10 views

WordPress Surbma | Font Awesome plugin <= 3.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Surbma | Font Awesome versions = 3.0...

6.5CVSS6.1AI score0.00367EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/11/08 12:00 a.m.15 views

WordPress Surbma | Font Awesome Plugin <= 3.0 is vulnerable to Cross Site Scripting (XSS)

Software Surbma | Font Awesome Type Plugin Vulnerable versions = 3.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51798 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID a2bf9fc587d0 Credits SOPROBRO Required privilege...

6.5CVSS6.5AI score0.00367EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/07/18 12:00 a.m.12 views

WordPress Surbma | GDPR Proof Cookie Consent & Notice Bar Plugin < 17.8.2 is vulnerable to Cross Site Scripting (XSS)

Software Surbma | GDPR Proof Cookie Consent & Notice Bar Type Plugin Vulnerable versions 17.8.2 Fixed in 17.8.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 17767534824b Credits...

6.2AI score0.00272EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2023/05/08 10:15 p.m.12 views

CVE-2023-23894

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Surbma Surbma | GDPR Proof Cookie Consent & Notice Bar plugin = 17.5.3 versions...

5.4CVSS6.7AI score0.00361EPSS
SaveExploits0References1
NVD
NVD
added 2023/05/08 10:15 p.m.57 views

CVE-2023-23894

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Surbma Surbma | GDPR Proof Cookie Consent & Notice Bar plugin = 17.5.3 versions...

6.5CVSS5.8AI score0.00361EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/08 10:15 p.m.18 views

Cross site scripting

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Surbma Surbma | GDPR Proof Cookie Consent & Notice Bar plugin = 17.5.3 versions...

4.9CVSS5.2AI score0.00361EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/05/08 9:57 p.m.59 views

CVE-2023-23894 WordPress Surbma | GDPR Proof Cookie Consent & Notice Bar Plugin <= 17.5.3 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Surbma Surbma | GDPR Proof Cookie Consent & Notice Bar plugin = 17.5.3 versions...

6.5CVSS6AI score0.00361EPSS
SaveExploits0References1
CVE
CVE
added 2023/05/08 9:57 p.m.52 views

CVE-2023-23894

CVE-2023-23894 pertains to a Stored XSS in the Surbma GDPR Proof Cookie Consent & Notice Bar plugin for WordPress (versions

6.5CVSS5.4AI score0.00361EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/05/08 12:00 a.m.17 views

PT-2023-19287 · WordPress · Surbma Surbma | Gdpr Proof Cookie Consent & Notice Bar

Name of the Vulnerable Software and Affected Versions: Surbma Surbma | GDPR Proof Cookie Consent & Notice Bar plugin versions = 17.5.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the Surbma Surbma | GDPR Proof Cookie Consent & Notice Bar plugi...

6.5CVSS5.5AI score0.00361EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/05/08 12:00 a.m.32 views

Wordpress plugin Surbma | GDPR Proof Cookie Consent & Notice Bar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

6.5CVSS6.4AI score0.00361EPSS
SaveExploits0References2
Rows per page
Query Builder