Lucene search
+L

3 matches found

CVE
CVE
•added 2024/07/21 6:57 a.m.•70 views

CVE-2024-37550

CVE-2024-37550 describes an Stored XSS in the WordPress plugin Template Kit – Export from Envato. Affected range listed: from n/a through 1.0.22. The description explicitly states Stored XSS via input during web page generation, implying exploit could occur when rendering pages that incorporate u...

5.9CVSS5.8AI score0.00276EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/21 12:00 a.m.•4 views

CVE-2024-37550: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Envato Template Kit – Export allows Stored XSS.This issue affects Template Kit – Export: from n/a through 1.0.22...

5.9CVSS5.8AI score0.00276EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/07/06 3:55 p.m.•13 views

WordPress Template Kit – Export plugin <= 1.0.23 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Mahesh Nagabhairava Patchstack Alliance in WordPress Plugin Template Kit – Export versions = 1.0.23...

5.9CVSS6.1AI score0.00276EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder