Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

54 matches found

EUVD
EUVD•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-3796

Malicious code in bioql PyPI...

7.1CVSS6.5AI score0.00255EPSS
SaveExploits0References2
EUVD
EUVD•added 2025/10/03 8:07 p.m.•12 views

EUVD-2024-42894

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.0026EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2025/05/23 9:10 a.m.•21 views

CVE-2024-48022

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in SysBasics Shortcode For Elementor Templates allows Stored XSS.This issue affects Shortcode For Elementor Templates: from n/a through 1.0.0...

6.5CVSS5.2AI score0.0026EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2025/05/23 6:26 a.m.•20 views

CVE-2024-10837

The SysBasics Customize My Account for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ parameter in all versions up to, and including, 2.7.29 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

6.1CVSS6.4AI score0.00378EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2025/02/16 1:20 p.m.•18 views

CVE-2025-24592

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SysBasics Customize My Account for WooCommerce customize-my-account-for-woocommerce allows Reflected XSS.This issue affects Customize My Account for WooCommerce: from n/a through = 2.8.22...

7.1CVSS5.9AI score0.00255EPSS
SaveExploits0References1
NVD
NVD•added 2025/02/14 1:15 p.m.•19 views

CVE-2025-24592

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SysBasics Customize My Account for WooCommerce customize-my-account-for-woocommerce allows Reflected XSS.This issue affects Customize My Account for WooCommerce: from n/a through = 2.8.22...

7.1CVSS0.00255EPSS
SaveExploits0References1
CVE
CVE•added 2025/02/14 12:44 p.m.•93 views

CVE-2025-24592

The CVE-2025-24592 entry concerns a WordPress plugin vulnerability: SysBasics Customize My Account for WooCommerce (affected versions up to 2.8.22). The issue is an improper neutralization of input during web page generation, resulting in a Reflected Cross-Site Scripting (XSS) vulnerability. Impa...

7.1CVSS5.9AI score0.00255EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2025/02/14 12:44 p.m.•31 views

CVE-2025-24592 WordPress SysBasics Customize My Account for WooCommerce plugin <= 2.8.22 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SysBasics Customize My Account for WooCommerce customize-my-account-for-woocommerce allows Reflected XSS.This issue affects Customize My Account for WooCommerce: from n/a through = 2.8.22...

7.1CVSS0.00255EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2025/02/14 12:44 p.m.•19 views

CVE-2025-24592 WordPress SysBasics Customize My Account for WooCommerce plugin <= 2.8.22 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SysBasics Customize My Account for WooCommerce customize-my-account-for-woocommerce allows Reflected XSS.This issue affects Customize My Account for WooCommerce: from n/a through = 2.8.22...

7.1CVSS5.9AI score0.00255EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2025/02/14 12:00 a.m.•1 views

CVE-2025-24592: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SysBasics Customize My Account for WooCommerce customize-my-account-for-woocommerce allows Reflected XSS.This issue affects Customize My Account for WooCommerce: from n/a through = 2.8.22...

7.1CVSS5.8AI score0.00255EPSS
SaveExploits0References1
NVD
NVD•added 2024/11/09 1:15 p.m.•44 views

CVE-2024-10837

The SysBasics Customize My Account for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ parameter in all versions up to, and including, 2.7.29 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

6.1CVSS0.00378EPSS
SaveExploits0References4
CVE
CVE•added 2024/11/09 12:30 p.m.•77 views

CVE-2024-10837

CVE-2024-10837 is a Reflected Cross‑Site Scripting vulnerability in the SysBasics Customize My Account for WooCommerce plugin for WordPress. It affects all versions up to 2.7.29 and is exploitable by unauthenticated attackers who lure a user into clicking a crafted link containing the vulnerable ...

6.1CVSS6AI score0.00378EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment•added 2024/11/09 12:30 p.m.•17 views

CVE-2024-10837 SysBasics Customize My Account for WooCommerce <= 2.7.29 - Reflected Cross-Site Scripting via tab Parameter

The SysBasics Customize My Account for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ parameter in all versions up to, and including, 2.7.29 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

6.1CVSS6.4AI score0.00378EPSS
SaveExploits0References4
Cvelist
Cvelist•added 2024/11/09 12:30 p.m.•40 views

CVE-2024-10837 SysBasics Customize My Account for WooCommerce <= 2.7.29 - Reflected Cross-Site Scripting via tab Parameter

The SysBasics Customize My Account for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ parameter in all versions up to, and including, 2.7.29 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

6.1CVSS0.00378EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies•added 2024/11/09 12:00 a.m.•20 views

PT-2024-16579 · WordPress · Sysbasics Customize My Account

Name of the Vulnerable Software and Affected Versions: SysBasics Customize My Account for WooCommerce plugin for WordPress versions prior to 2.7.29 Description: The vulnerability is a Reflected Cross-Site Scripting issue via the tab parameter, caused by insufficient input sanitization and output...

6.1CVSS6.9AI score0.00378EPSS
SaveExploits0References19
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2024/11/09 12:00 a.m.•2 views

CVE-2024-10837: Improper Neutralization of Input During Web Page Generation

The SysBasics Customize My Account for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ parameter in all versions up to, and including, 2.7.29 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

6.1CVSS6AI score0.00378EPSS
SaveExploits0References1
NVD
NVD•added 2024/10/17 1:15 p.m.•26 views

CVE-2024-48022

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in SysBasics Shortcode For Elementor Templates allows Stored XSS.This issue affects Shortcode For Elementor Templates: from n/a through 1.0.0...

6.5CVSS0.0026EPSS
SaveExploits0References1
CVE
CVE•added 2024/10/17 12:28 p.m.•63 views

CVE-2024-48022

The CVE-2024-48022 entry concerns a Stored XSS in the WordPress plugin Shortcode For Elementor Templates (

6.5CVSS5.2AI score0.0026EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2024/10/17 12:28 p.m.•13 views

CVE-2024-48022 WordPress Shortcode For Elementor Templates plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in SysBasics Shortcode For Elementor Templates allows Stored XSS.This issue affects Shortcode For Elementor Templates: from n/a through 1.0.0...

6.5CVSS6.4AI score0.0026EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2024/10/17 12:28 p.m.•42 views

CVE-2024-48022 WordPress Shortcode For Elementor Templates plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in SysBasics Shortcode For Elementor Templates allows Stored XSS.This issue affects Shortcode For Elementor Templates: from n/a through 1.0.0...

6.5CVSS0.0026EPSS
SaveExploits0References1
Rows per page
Query Builder