Lucene search
+L

13937 matches found

Positive Technologies
Positive Technologies
added 2024/03/26 12:00 a.m.13 views

PT-2024-18865 · WordPress · Master Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Master Addons for Elementor plugin for WordPress versions up to, and including, 2.0.5.6 Description: The issue is related to Stored Cross-Site Scripting via the Pricing Table widget due to insufficient input sanitization and output...

6.4CVSS8AI score0.0034EPSS
SaveExploits0References5
WPVulnDB
WPVulnDB
added 2024/03/26 12:00 a.m.11 views

Master Addons for Elementor < 2.0.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget

Description The Master Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Pricing Table widget in all versions up to, and including, 2.0.5.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

6.4CVSS5.9AI score0.0034EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/03/19 3:15 p.m.37 views

CVE-2024-29110

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pauple Table & Contact Form 7 Database – Tablesome allows Reflected XSS.This issue affects Table & Contact Form 7 Database – Tablesome: from n/a through 1.0.27...

7.1CVSS6.9AI score0.00419EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/19 3:07 p.m.18 views

CVE-2024-29110 WordPress Tablesome plugin <= 1.0.27 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pauple Table & Contact Form 7 Database – Tablesome allows Reflected XSS.This issue affects Table & Contact Form 7 Database – Tablesome: from n/a through 1.0.27...

7.1CVSS6.9AI score0.00419EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/19 3:07 p.m.82 views

CVE-2024-29110

CVE-2024-29110 is a reflected XSS in the WordPress plugin tablesome (Tablesome) for Pauple Table & Contact Form 7 Database, caused by improper neutralization of input during web page generation. Affected affected version: Tablesome from n/a up to 1.0.27. The CVE description and related sources co...

7.1CVSS8.6AI score0.00419EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2024/03/19 3:50 a.m.8 views

SUSE CVE-2021-47109

In the Linux kernel, the following vulnerability has been resolved: neighbour: allow NUDNOARP entries to be forced GCed IFFPOINTOPOINT interfaces use NUDNOARP entries for IPv6. It's possible to fill up the neighbour table with enough entries that it will overflow for valid connections after that...

5.5CVSS7.8AI score0.00684EPSS
SaveExploits0References6
Patchstack
Patchstack
added 2024/03/19 12:00 a.m.18 views

WordPress Responsive Pricing Table Plugin < 5.1.11 is vulnerable to Cross Site Scripting (XSS)

Software Responsive Pricing Table Type Plugin Vulnerable versions 5.1.11 Fixed in 5.1.11 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1333 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 3d594f4e22e1 Credits Dmitrii Ignatye...

5.4CVSS5.7AI score0.00401EPSS
SaveExploits2References3Affected Software1
CNNVD
CNNVD
added 2024/03/19 12:00 a.m.11 views

Netentsec NS-ASG Application Security Gateway SQL Injection Vulnerability

Netentsec NS-ASG Application Security Gateway is an application security gateway from China Netentsec. A SQL injection vulnerability exists in Netentsec NS-ASG Application Security Gateway version 6.3, which originates from the parameter FireWallTableArray in the file...

9.8CVSS8AI score0.00838EPSS
SaveExploits1References5
NVD
NVD
added 2024/03/18 4:15 p.m.29 views

CVE-2024-1333

The Responsive Pricing Table WordPress plugin before 5.1.11 does not validate and escape some of its Pricing Table options before outputting them back in a page/post where the related shortcode is embed, which could allow users with the author role and above to perform Stored Cross-Site Scripting...

5.4CVSS5.6AI score0.00401EPSS
SaveExploits2References1
OSV
OSV
added 2024/03/18 4:15 p.m.11 views

CVE-2024-1333

The Responsive Pricing Table WordPress plugin before 5.1.11 does not validate and escape some of its Pricing Table options before outputting them back in a page/post where the related shortcode is embed, which could allow users with the author role and above to perform Stored Cross-Site Scripting...

5.4CVSS5.8AI score0.00401EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2024/03/18 3:15 p.m.37 views

CVE-2024-1333 Responsive Pricing Table < 5.1.11 - Author+ Stored XSS

The Responsive Pricing Table WordPress plugin before 5.1.11 does not validate and escape some of its Pricing Table options before outputting them back in a page/post where the related shortcode is embed, which could allow users with the author role and above to perform Stored Cross-Site Scripting...

5.8AI score0.00401EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2024/03/18 3:15 p.m.15 views

CVE-2024-1333 Responsive Pricing Table < 5.1.11 - Author+ Stored XSS

The Responsive Pricing Table WordPress plugin before 5.1.11 does not validate and escape some of its Pricing Table options before outputting them back in a page/post where the related shortcode is embed, which could allow users with the author role and above to perform Stored Cross-Site Scripting...

5.8AI score0.00401EPSS
SaveExploits2References1
OSV
OSV
added 2024/03/18 10:14 a.m.7 views

CVE-2023-52614 PM / devfreq: Fix buffer overflow in trans_stat_show

In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Fix buffer overflow in transstatshow Fix buffer overflow in transstatshow. Convert simple snprintf to the more secure scnprintf with size of PAGESIZE. Add condition checking if we are exceeding PAGESIZE and exit ear...

7.8CVSS6.4AI score
SaveExploits0References11
CNNVD
CNNVD
added 2024/03/18 12:00 a.m.9 views

WordPress Plugin Responsive Pricing Table Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

5.4CVSS6AI score0.00401EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2024/03/17 11:30 a.m.41 views

mapXplore - Allow Exporting The Information Downloaded With Sqlmap To A Relational Database Like Postgres And Sqlite

mapXplore is a modular application that imports data extracted of the sqlmap to PostgreSQL or SQLite database. Its main features are: Import of information extracted from sqlmap to PostgreSQL or SQLite for subsequent querying. Sanitized information, which means that at the time of import, it...

6.9AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2024/03/16 7:07 p.m.30 views

CVE-2021-47109

In the Linux kernel, the following vulnerability has been resolved: neighbour: allow NUDNOARP entries to be forced GCed IFFPOINTOPOINT interfaces use NUDNOARP entries for IPv6. It's possible to fill up the neighbour table with enough entries that it will overflow for valid connections after that...

5.5CVSS6.8AI score0.00684EPSS
SaveExploits0References4
OSV
OSV
added 2024/03/16 1:15 a.m.7 views

CVE-2023-51512

Cross Site Request Forgery CSRF vulnerability in WBW Product Table by WBW.This issue affects Product Table by WBW: from n/a through 1.8.6...

8.8CVSS5.8AI score0.00227EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/16 1:15 a.m.21 views

CVE-2023-51512

Cross Site Request Forgery CSRF vulnerability in WBW Product Table by WBW.This issue affects Product Table by WBW: from n/a through 1.8.6...

8.8CVSS4.7AI score0.00227EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/16 12:46 a.m.12 views

CVE-2023-51512 WordPress Product Table by WBW plugin <= 1.8.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability in WBW Product Table by WBW.This issue affects Product Table by WBW: from n/a through 1.8.6...

4.3CVSS7AI score0.00227EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/16 12:46 a.m.71 views

CVE-2023-51512

CVE-2023-51512 affects the WordPress plugin Product Table by WBW . The public vulnerability report describes a Cross-Site Request Forgery (CSRF) flaw in Product Table by WBW versions up to and including 1.8.6. The vulnerability could enable an authenticated user to perform unintended actions on a...

8.8CVSS8.5AI score0.00227EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder