Lucene search
+L

16108 matches found

RedhatCVE
RedhatCVE
•added 2025/06/08 1:19 p.m.•12 views

CVE-2025-49250

Improper Control of Generation of Code 'Code Injection' vulnerability in cmoreira Team Showcase team-showcase-cm allows Code Injection.This issue affects Team Showcase: from n/a through 25.05.13...

4.3CVSS5.9AI score0.00328EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/08 1:19 p.m.•9 views

CVE-2025-49309

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HT Plugins HT Team Member ht-team-member allows Stored XSS.This issue affects HT Team Member: from n/a through = 1.1.7...

6.5CVSS5.9AI score0.00252EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/08 1:19 p.m.•11 views

CVE-2025-49248

Missing Authorization vulnerability in cmoreira Team Showcase team-showcase-cm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team Showcase: from n/a through 25.05.13...

4.3CVSS5.9AI score0.00283EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/06 1:15 p.m.•15 views

CVE-2025-49309

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HT Plugins HT Team Member ht-team-member allows Stored XSS.This issue affects HT Team Member: from n/a through = 1.1.7...

6.5CVSS0.00252EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/06 1:15 p.m.•12 views

CVE-2025-49250

Improper Control of Generation of Code 'Code Injection' vulnerability in cmoreira Team Showcase team-showcase-cm allows Code Injection.This issue affects Team Showcase: from n/a through 25.05.13...

4.3CVSS0.00328EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/06 1:15 p.m.•12 views

CVE-2025-49248

Missing Authorization vulnerability in cmoreira Team Showcase team-showcase-cm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team Showcase: from n/a through 25.05.13...

4.3CVSS0.00283EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/06 12:53 p.m.•19 views

CVE-2025-49309 WordPress HT Team Member plugin <= 1.1.7 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HT Plugins HT Team Member ht-team-member allows Stored XSS.This issue affects HT Team Member: from n/a through = 1.1.7...

6.5CVSS0.00252EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/06/06 12:53 p.m.•8 views

CVE-2025-49309 WordPress HT Team Member <= 1.1.7 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HT Plugins HT Team Member allows Stored XSS. This issue affects HT Team Member: from n/a through 1.1.7...

6.5CVSS6.7AI score0.00252EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/06 12:53 p.m.•56 views

CVE-2025-49309

CVE-2025-49309 affects the WordPress plugin HT Team Member . The vulnerability is a Stored XSS due to improper neutralization of input during web page generation. Affected versions are listed as “from n/a through 1.1.7.” The root cause is described as the plugin failing to neutralize user-control...

6.5CVSS5.9AI score0.00252EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/06 12:53 p.m.•48 views

CVE-2025-49250

CVE-2025-49250 affects the WordPress plugin Team Showcase . The connected Wordfence entry shows an Authenticated Arbitrary Shortcode Execution vulnerability in Team Showcase ("Team Showcase

4.3CVSS5.9AI score0.00328EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/06 12:53 p.m.•50 views

CVE-2025-49248

CVE-2025-49248 concerns a Missing Authorization issue in the Team Showcase WordPress plugin. The available data indicate an incorrect configuration of access control security levels, allowing actions that should be restricted. The CVSS vector in the initial data reports network access with low pr...

4.3CVSS5.9AI score0.00283EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/06/06 12:53 p.m.•10 views

CVE-2025-49248 WordPress Team Showcase < 25.05.13 - Broken Access Control Vulnerability

Missing Authorization vulnerability in cmoreira Team Showcase allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Team Showcase: from n/a through n/a...

4.3CVSS7.1AI score0.00283EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/06 12:53 p.m.•40 views

CVE-2025-49250 WordPress Team Showcase plugin < 25.05.13 - Arbitrary Shortcode Execution vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in cmoreira Team Showcase team-showcase-cm allows Code Injection.This issue affects Team Showcase: from n/a through 25.05.13...

4.3CVSS0.00328EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/06 12:53 p.m.•22 views

CVE-2025-49248 WordPress Team Showcase plugin < 25.05.13 - Broken Access Control Vulnerability

Missing Authorization vulnerability in cmoreira Team Showcase team-showcase-cm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team Showcase: from n/a through 25.05.13...

4.3CVSS0.00283EPSS
SaveExploits0References1
Trend Micro Simply Security
Trend Micro Simply Security
•added 2025/06/06 12:00 a.m.•11 views

NEOM McLaren Formula E Team & Trend Micro Innovation History

Explore how innovation becomes a team sport when Trend Micro and the NEOM McLaren Formula E Team leaders come together to talk culture, risk, and forward thinking...

7.2AI score
SaveExploits0
CNNVD
CNNVD
•added 2025/06/06 12:00 a.m.•13 views

WordPress plugin Team Showcase 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

4.3CVSS4.9AI score0.00283EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/06/06 12:00 a.m.•11 views

WordPress plugin Team Showcase 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A code injection vulnerability exists in WordPress...

4.3CVSS5.5AI score0.00328EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/06/06 12:00 a.m.•18 views

PT-2025-24237 · Unknown · Ht Team Member

Name of the Vulnerable Software and Affected Versions: HT Team Member versions 1.1.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

6.5CVSS6.2AI score0.00252EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/06/06 12:00 a.m.•17 views

PT-2025-24210 · Unknown · Cmoreira Team Showcase

Name of the Vulnerable Software and Affected Versions: cmoreira Team Showcase affected versions not specified Description: The issue is related to an Improper Control of Generation of Code, also known as 'Code Injection', which allows for code injection in cmoreira Team Showcase. Recommendations:...

4.3CVSS4.7AI score0.00328EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/06 12:00 a.m.•2 views

CVE-2025-49309: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HT Plugins HT Team Member ht-team-member allows Stored XSS.This issue affects HT Team Member: from n/a through = 1.1.7...

6.5CVSS5.8AI score0.00252EPSS
SaveExploits0References1
Rows per page
Query Builder