Lucene search
K

122 matches found

RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.1 views

CVE-2025-69011

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPKube Cool Tag Cloud cool-tag-cloud allows Stored XSS.This issue affects Cool Tag Cloud: from n/a through = 2.29...

6.5CVSS5.5AI score0.00045EPSS
Exploits0References1
NVD
NVD
added 2026/02/20 4:22 p.m.2 views

CVE-2025-69011

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPKube Cool Tag Cloud cool-tag-cloud allows Stored XSS.This issue affects Cool Tag Cloud: from n/a through = 2.29...

6.5CVSS0.00045EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/20 3:46 p.m.1 views

CVE-2025-69011 WordPress Cool Tag Cloud plugin <= 2.29 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPKube Cool Tag Cloud cool-tag-cloud allows Stored XSS.This issue affects Cool Tag Cloud: from n/a through = 2.29...

6.5CVSS5.3AI score0.00045EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/20 3:46 p.m.17 views

CVE-2025-69011 WordPress Cool Tag Cloud plugin <= 2.29 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPKube Cool Tag Cloud cool-tag-cloud allows Stored XSS.This issue affects Cool Tag Cloud: from n/a through = 2.29...

6.5CVSS0.00045EPSS
Exploits0References1
CVE
CVE
added 2026/02/20 3:46 p.m.6 views

CVE-2025-69011

CVE-2025-69011 is a Stored XSS in WordPress plugin Cool Tag Cloud (

6.5CVSS5.5AI score0.00045EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/20 12:0 a.m.3 views

WordPress plugin Cool Tag Cloud 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.5CVSS5.6AI score0.00045EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/20 12:0 a.m.1 views

PT-2026-21120

Name of the Vulnerable Software and Affected Versions WPKube Cool Tag Cloud versions through 2.29 Description The software contains a flaw related to improper input handling during web page creation, specifically a Stored Cross-site Scripting issue. This allows for the injection of malicious...

5.4AI score0.00045EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/31 5:25 a.m.1 views

CVE-2025-49344 WordPress SensitiveTagCloud plugin <= 1.4.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in reneade SensitiveTagCloud sensitive-tag-cloud allows Stored XSS.This issue affects SensitiveTagCloud: from n/a through = 1.4.1...

7.1CVSS5.2AI score0.00015EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/12/31 12:0 a.m.6 views

WordPress Cool Tag Cloud plugin <= 2.29 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Cool Tag Cloud versions = 2.29...

8.1CVSS5.4AI score0.00035EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/31 12:0 a.m.1 views

PT-2025-54277

Name of the Vulnerable Software and Affected Versions SensitiveTagCloud versions through 1.4.1 Description A Cross-Site Request Forgery CSRF issue exists in SensitiveTagCloud, which also allows for Stored Cross-Site Scripting XSS. This allows an attacker to potentially perform actions on behalf o...

7.1CVSS5.5AI score0.00015EPSS
Exploits0References6
Patchstack
Patchstack
added 2025/12/26 6:8 p.m.3 views

WordPress Cool Tag Cloud plugin <= 2.29 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by zaim in WordPress Plugin Cool Tag Cloud versions = 2.29...

6.1AI score0.00045EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/06 9:37 a.m.3 views

CVE-2025-13614

The Cool Tag Cloud plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cooltagcloud' shortcode in all versions up to, and including, 2.29 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

8.1CVSS5AI score0.00035EPSS
Exploits0References1
NVD
NVD
added 2025/12/05 10:15 a.m.2 views

CVE-2025-13614

The Cool Tag Cloud plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cooltagcloud' shortcode in all versions up to, and including, 2.29 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

8.1CVSS0.00035EPSS
Exploits0References2
CVE
CVE
added 2025/12/05 9:27 a.m.11 views

CVE-2025-13614

CVE-2025-13614 corresponds to a Stored Cross‑Site Scripting (XSS) vulnerability in the WordPress plugin Cool Tag Cloud. Public details confirm: all versions up to and including 2.29 are affected due to insufficient input sanitization and output escaping on user-supplied attributes in the cool_tag...

8.1CVSS4.7AI score0.00035EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/05 9:27 a.m.3 views

CVE-2025-13614 Cool Tag Cloud <= 2.29 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Cool Tag Cloud plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cooltagcloud' shortcode in all versions up to, and including, 2.29 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

8.1CVSS4.7AI score0.00035EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/05 9:27 a.m.2 views

EUVD-2025-201397

The Cool Tag Cloud plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cooltagcloud' shortcode in all versions up to, and including, 2.29 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

8.1CVSS4.7AI score0.00035EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/12/05 9:27 a.m.21 views

CVE-2025-13614 Cool Tag Cloud <= 2.29 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Cool Tag Cloud plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cooltagcloud' shortcode in all versions up to, and including, 2.29 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

8.1CVSS0.00035EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/05 12:0 a.m.2 views

WordPress plugin Cool Tag Cloud 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

8.1CVSS5.6AI score0.00035EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/12/05 12:0 a.m.3 views

PT-2025-49236

Name of the Vulnerable Software and Affected Versions Cool Tag Cloud plugin for WordPress versions prior to 2.30 Description The Cool Tag Cloud plugin for WordPress is susceptible to Stored Cross-Site Scripting through the ‘cool tag cloud’ shortcode. This is due to inadequate input sanitization a...

8.1CVSS5.4AI score0.00035EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2021-11594

Malware in sbrugna...

5.4CVSS5.4AI score0.0018EPSS
Exploits2References2
Rows per page
Query Builder