Lucene search
K

122 matches found

OSV
OSV
added 2024/01/17 5:15 p.m.0 views

CVE-2022-41990

Cross-Site Request Forgery CSRF vulnerability in Vinoj Cardoza 3D Tag Cloud allows Stored XSS.This issue affects 3D Tag Cloud: from n/a through 3.8...

8.8CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2024/01/17 5:15 p.m.20 views

CVE-2022-41990

Cross-Site Request Forgery CSRF vulnerability in Vinoj Cardoza 3D Tag Cloud allows Stored XSS.This issue affects 3D Tag Cloud: from n/a through 3.8...

8.8CVSS7.3AI score0.0023EPSS
Exploits0References1
Prion
Prion
added 2024/01/17 5:15 p.m.17 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Vinoj Cardoza 3D Tag Cloud allows Stored XSS.This issue affects 3D Tag Cloud: from n/a through 3.8...

6.8CVSS7AI score0.0023EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/01/17 4:18 p.m.24 views

CVE-2022-41990 WordPress 3D Tag Cloud Plugin <= 3.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Vinoj Cardoza 3D Tag Cloud allows Stored XSS.This issue affects 3D Tag Cloud: from n/a through 3.8...

7.1CVSS8.7AI score0.0023EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/01/17 4:18 p.m.3 views

CVE-2022-41990 WordPress 3D Tag Cloud Plugin <= 3.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Vinoj Cardoza 3D Tag Cloud allows Stored XSS.This issue affects 3D Tag Cloud: from n/a through 3.8...

7.1CVSS7.3AI score0.0023EPSS
Exploits0References1
CVE
CVE
added 2024/01/17 4:18 p.m.44 views

CVE-2022-41990

CVE-2022-41990 documents a CSRF vulnerability in the WordPress plugin 3D Tag Cloud (versions

8.8CVSS8.5AI score0.0023EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/01/17 12:0 a.m.3 views

WordPress plugin 3D Tag Cloud Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

8.8CVSS6.6AI score0.0023EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/01/17 12:0 a.m.2 views

PT-2024-11653 · Vinoj Cardoza · 3D Tag Cloud

Name of the Vulnerable Software and Affected Versions: Vinoj Cardoza 3D Tag Cloud versions 3.8 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

8.8CVSS8.9AI score0.0023EPSS
Exploits0References5
OSV
OSV
added 2023/07/10 4:15 p.m.2 views

CVE-2023-28995

Cross-Site Request Forgery CSRF vulnerability in Keith Solomon Configurable Tag Cloud CTC plugin = 5.2 versions...

8.8CVSS5.8AI score0.00303EPSS
Exploits0References1
NVD
NVD
added 2023/07/10 4:15 p.m.12 views

CVE-2023-28995

Cross-Site Request Forgery CSRF vulnerability in Keith Solomon Configurable Tag Cloud CTC plugin = 5.2 versions...

8.8CVSS6.5AI score0.00303EPSS
Exploits0References1
Prion
Prion
added 2023/07/10 4:15 p.m.11 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Keith Solomon Configurable Tag Cloud CTC plugin = 5.2 versions...

6.8CVSS8.7AI score0.00303EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/07/10 3:31 p.m.12 views

CVE-2023-28995 WordPress Configurable Tag Cloud Plugin <= 5.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Keith Solomon Configurable Tag Cloud CTC plugin = 5.2 versions...

5.4CVSS9AI score0.00303EPSS
Exploits0References1
CVE
CVE
added 2023/07/10 3:31 p.m.25 views

CVE-2023-28995

CVE-2023-28995 is a CSRF in the WordPress plugin Configurable Tag Cloud (CTC) , affecting versions ≤ 5.2. The root cause is described as CSRF via the ctc_options_page() entry point, enabling unauthenticated actions on vulnerable sites. Patch/mitigation: update to version 5.3 or later (as indicate...

8.8CVSS7.1AI score0.00303EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/10 3:31 p.m.12 views

CVE-2023-28995 WordPress Configurable Tag Cloud Plugin <= 5.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Keith Solomon Configurable Tag Cloud CTC plugin = 5.2 versions...

5.4CVSS7.1AI score0.00303EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/07/10 12:0 a.m.2 views

Wrodpress Plugin Configurable Tag Cloud 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

8.8CVSS8.1AI score0.00303EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/07/10 12:0 a.m.2 views

PT-2023-22072 · Unknown · Keith Solomon Configurable Tag Cloud (Ctc) Plugin

Name of the Vulnerable Software and Affected Versions: Keith Solomon Configurable Tag Cloud CTC plugin versions = 5.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a...

8.8CVSS8.8AI score0.00303EPSS
Exploits0References3
WPVulnDB
WPVulnDB
added 2023/03/30 12:0 a.m.11 views

Configurable Tag Cloud < 5.3 - Cross-Site Request Forgery

Cross-Site Request Forgery CSRF vulnerability in Keith Solomon Configurable Tag Cloud CTC plugin = 5.2 versions...

8.8CVSS6.9AI score0.00303EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2023/03/30 12:0 a.m.7 views

WordPress Configurable Tag Cloud Plugin <= 5.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Configurable Tag Cloud Type Plugin Vulnerable versions = 5.2 Fixed in 5.3 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-28995 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID ee8fb82c39fa Credits Abdi Pranata...

8.8CVSS6.6AI score0.00303EPSS
Exploits0References2Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 6:4 a.m.1 views

SUSE CVE-2009-0931

Cross-site scripting XSS vulnerability in the tag cloud search script horde/services/portal/cloudsearch.php in Horde before 3.2.4 and 3.3.3, and Horde Groupware before 1.1.5, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6AI score0.02026EPSS
Exploits1References3
Patchstack
Patchstack
added 2022/10/27 12:0 a.m.24 views

WordPress 3D Tag Cloud plugin <= 3.8 - Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability

Stored Cross-Site Scripting XSS via Cross-Site Request Forgery CSRF vulnerability discovered by Lana Codes Patchstack Alliance in the WordPress 3D Tag Cloud plugin versions = 3.8. Solution Deactivate and delete. This plugin has been closed as of September 22, 2022 and is not available for downloa...

2.1AI score0.0023EPSS
Exploits0Affected Software1
Rows per page
Query Builder