Lucene search
+L

16600 matches found

NVD
NVD
•added 2023/11/22 10:15 p.m.•26 views

CVE-2023-47773

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YAS Global Team Permalinks Customizer plugin = 2.8.2 versions...

7.1CVSS0.00412EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/22 10:15 p.m.•24 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YAS Global Team Permalinks Customizer plugin = 2.8.2 versions...

5.8CVSS7.1AI score0.00412EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/11/22 10:05 p.m.•93 views

CVE-2023-47773

CVE-2023-47773 : Reflected Cross-Site Scripting in the WordPress plugin Permalinks Customizer (YAS Global Team) versions

7.1CVSS6.6AI score0.00412EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/11/22 7:46 p.m.•46 views

CVE-2023-30496 WordPress Bus Ticket Booking with Seat Reservation Plugin <= 5.2.5 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MagePeople Team WpBusTicketly plugin = 5.2.5 versions...

7.1CVSS7.1AI score0.00404EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/22 7:46 p.m.•111 views

CVE-2023-30496

CVE-2023-30496 is a Cross-Site Scripting (XSS) vulnerability in the MagePeople Team WpBusTicketly WordPress plugin. Affected versions are

7.1CVSS6.6AI score0.00404EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2023/11/22 7:15 p.m.•28 views

CVE-2023-47775

Cross-Site Request Forgery CSRF vulnerability in gVectors Team Comments — wpDiscuz plugin = 7.6.11 versions...

8.8CVSS0.00261EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/22 7:15 p.m.•24 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in gVectors Team Comments — wpDiscuz plugin = 7.6.11 versions...

6.8CVSS7.3AI score0.00261EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/11/22 6:23 p.m.•100 views

CVE-2023-47775

CVE-2023-47775 : Cross-Site Request Forgery in the WordPress plugin wpDiscuz (gVectors Team Comments) affects versions

8.8CVSS6.5AI score0.00261EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/11/22 6:15 p.m.•21 views

Authorization

An issue was discovered by IPVM team in Network Optix NxCloud before 23.1.0.40440. It was possible to add a fake VMS server to NxCloud by using the exact identification of a legitimate VMS server. As result, it was possible to retrieve authorization headers from legitimate users when the legitima...

5.1CVSS7.1AI score0.00489EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/22 12:00 a.m.•2 views

CVE-2023-47773: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YAS Global Team Permalinks Customizer plugin = 2.8.2 versions...

7.1CVSS6.4AI score0.00412EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/22 12:00 a.m.•1 views

CVE-2023-30496: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MagePeople Team WpBusTicketly plugin = 5.2.5 versions...

7.1CVSS6.4AI score0.00404EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/22 12:00 a.m.•3 views

CVE-2023-47775: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in gVectors Team Comments — wpDiscuz plugin = 7.6.11 versions...

8.8CVSS7.9AI score0.00261EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/11/22 12:00 a.m.•16 views

PT-2023-30600 · Unknown · Yas Global Team Permalinks Customizer

Name of the Vulnerable Software and Affected Versions: YAS Global Team Permalinks Customizer plugin versions prior to 2.8.3 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for potential malicious...

7.1CVSS6.7AI score0.00412EPSS
SaveExploits0References3
Circl
Circl
•added 2023/11/17 7:00 a.m.•17 views

CVE-2023-44796

creationtimestamp| type| source ---|---|--- 2023-11-17 07:00:08+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5848...

5.4CVSS5.5AI score0.00679EPSS
SaveExploits1References1
NVD
NVD
•added 2023/11/16 8:15 p.m.•22 views

CVE-2023-32957

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Dazzlersoft Team Members Showcase plugin = 1.3.4 versions...

5.9CVSS0.00386EPSS
SaveExploits0References1
OSV
OSV
•added 2023/11/16 8:15 p.m.•13 views

CVE-2023-32957

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Dazzlersoft Team Members Showcase plugin = 1.3.4 versions...

4.8CVSS7.3AI score0.00386EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/16 8:15 p.m.•22 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Dazzlersoft Team Members Showcase plugin = 1.3.4 versions...

4.3CVSS5.8AI score0.00386EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/11/16 7:52 p.m.•92 views

CVE-2023-32957

CVE-2023-32957 concerns the WordPress plugin Team Members Showcase by Dazzlersoft, affected in versions &lt;= 1.3.4. The vulnerability is an authenticated Stored Cross-Site Scripting (XSS) flaw, exploitable by an administrator or higher privileges via admin settings. Multiple sources corroborate ...

5.9CVSS5.1AI score0.00386EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/16 12:00 a.m.•4 views

CVE-2023-32957: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Dazzlersoft Team Members Showcase plugin = 1.3.4 versions...

5.9CVSS5.6AI score0.00386EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/11/16 12:00 a.m.•14 views

WordPress Plugin Team Members Showcase Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

5.9CVSS6.3AI score0.00386EPSS
SaveExploits0References2
Rows per page
Query Builder