Lucene search
+L

99 matches found

Patchstack
Patchstack
added 2024/11/04 12:00 a.m.22 views

WordPress Team Showcase and Slider – Team Members Builder Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)

Software Team Showcase and Slider – Team Members Builder Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51763 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 901482778662 Credits Mika...

7.1CVSS6.5AI score0.0027EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/09/18 12:15 a.m.12 views

CVE-2024-44002

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PickPlugins Team Showcase allows Reflected XSS.This issue affects Team Showcase: from n/a through 1.22.25...

6.1CVSS5.8AI score0.00307EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/18 12:15 a.m.37 views

CVE-2024-44002

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Team Showcase team allows Reflected XSS.This issue affects Team Showcase: from n/a through = 1.22.25...

7.1CVSS0.00307EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/09/17 11:12 p.m.38 views

CVE-2024-44002 WordPress Team Showcase plugin <= 1.22.25 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Team Showcase team allows Reflected XSS.This issue affects Team Showcase: from n/a through = 1.22.25...

7.1CVSS0.00307EPSS
SaveExploits0References1
CVE
CVE
added 2024/09/17 11:12 p.m.73 views

CVE-2024-44002

The CVE-2024-44002 entry concerns the WordPress Team Showcase plugin (Team Showcase) and is a Reflected Cross-Site Scripting (XSS) vulnerability in versions 1.22.25 and earlier. The vulnerability stems from improper input neutralization during web page generation, enabling a reflected XSS conditi...

7.1CVSS5.9AI score0.00307EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/09/17 12:00 a.m.13 views

WordPress plugin Team Showcase 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6AI score0.00307EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/09/16 5:37 a.m.13 views

WordPress Team Showcase plugin <= 1.22.25 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin Team Showcase versions = 1.22.25...

7.1CVSS6.1AI score0.00307EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/09/16 12:00 a.m.25 views

WordPress Team Showcase Plugin <= 1.22.25 is vulnerable to Cross Site Scripting (XSS)

Software Team Showcase Type Plugin Vulnerable versions = 1.22.25 Fixed in 1.22.26 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-44002 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID aa646d7f4421 Credits Le Ngoc Anh Required privilege...

7.1CVSS9.3AI score0.00307EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2024/08/18 3:15 p.m.38 views

CVE-2024-43321

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PickPlugins Team Showcase allows Stored XSS.This issue affects Team Showcase: from n/a through 1.22.23...

6.5CVSS0.0026EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/18 2:13 p.m.42 views

CVE-2024-43321 WordPress Team Showcase plugin <= 1.22.23 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PickPlugins Team Showcase allows Stored XSS.This issue affects Team Showcase: from n/a through 1.22.23...

6.5CVSS0.0026EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/18 2:13 p.m.72 views

CVE-2024-43321

CVE-2024-43321 corresponds to a Stored XSS vulnerability in the PickPlugins Team Showcase WordPress plugin (Team Showcase) prior to version 1.22.23. The issue involves improper input neutralization during web page generation, enabling stored cross-site scripting. According to the connected Wordfe...

6.5CVSS6.5AI score0.0026EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/18 2:13 p.m.18 views

CVE-2024-43321 WordPress Team Showcase plugin <= 1.22.23 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PickPlugins Team Showcase allows Stored XSS.This issue affects Team Showcase: from n/a through 1.22.23...

6.5CVSS6.8AI score0.0026EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/08/18 12:00 a.m.17 views

WordPress plugin Team Showcase 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6AI score0.0026EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/08/16 12:27 p.m.8 views

WordPress Team Showcase plugin <= 1.22.23 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Team Showcase versions = 1.22.23...

6.5CVSS6.1AI score0.0026EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/08/16 12:00 a.m.13 views

WordPress Team Showcase Plugin <= 1.22.23 is vulnerable to Cross Site Scripting (XSS)

Software Team Showcase Type Plugin Vulnerable versions = 1.22.23 Fixed in 1.22.24 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43321 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 48667d784b23 Credits LVT-tholv2k Required privilege...

6.5CVSS6.6AI score0.0026EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/10/19 2:15 a.m.11 views

CVE-2023-5639

The Team Showcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tmfshortcode' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

5.4CVSS7AI score0.00446EPSS
SaveExploits0References4
Prion
Prion
added 2023/10/19 2:15 a.m.28 views

Cross site scripting

The Team Showcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tmfshortcode' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

4.9CVSS5.2AI score0.00446EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2023/10/19 1:53 a.m.77 views

CVE-2023-5639

CVE-2023-5639 affects the WordPress plugin Team Showcase. The vulnerability is a Stored XSS via the plugin shortcode tmfshortcode in all versions up to 2.1 due to insufficient input sanitization and output escaping on user attributes. Exploitation requires an authenticated attacker with contribut...

6.4CVSS5.2AI score0.00446EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/19 1:53 a.m.11 views

CVE-2023-5639

The Team Showcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tmfshortcode' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.7AI score0.00446EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2023/10/19 12:00 a.m.22 views

WordPress Team Showcase Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)

Software Team Showcase Type Plugin Vulnerable versions = 2.1 Fixed in 2.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5639 Patch priority Low CVSS severity Low 6.4 Developer Claim ownership PSID b98d06c1b712 Credits István Márton Required privile...

6.4CVSS5.7AI score0.00446EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder