Lucene search
+L

41 matches found

RedhatCVE
RedhatCVE
•added 2026/01/24 3:18 p.m.•31 views

CVE-2026-24621

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows DOM-Based XSS.This issue affects Terms descriptions: from n/a through = 3.4.9...

5.9CVSS5.4AI score0.00166EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/23 3:16 p.m.•33 views

CVE-2026-24621

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows DOM-Based XSS.This issue affects Terms descriptions: from n/a through = 3.4.9...

5.9CVSS0.00166EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/23 2:29 p.m.•8 views

CVE-2026-24621 WordPress Terms descriptions plugin <= 3.4.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows DOM-Based XSS.This issue affects Terms descriptions: from n/a through = 3.4.9...

5.9CVSS5.4AI score0.00166EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/23 2:29 p.m.•7 views

CVE-2026-24621

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows DOM-Based XSS.This issue affects Terms descriptions: from n/a through = 3.4.9...

4.8CVSS5.9AI score0.00166EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/01/23 2:29 p.m.•42 views

CVE-2026-24621 WordPress Terms descriptions plugin <= 3.4.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows DOM-Based XSS.This issue affects Terms descriptions: from n/a through = 3.4.9...

5.9CVSS0.00166EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/23 2:29 p.m.•27 views

CVE-2026-24621

CVE-2026-24621 is a DOM-based XSS in the WordPress Terms descriptions plugin (terms-descriptions) caused by improper input neutralization during web page generation. Affected: Terms descriptions plugin, versions n/a through 3.4.9. Impact per sources: DOM-based XSS could leak or alter content in t...

5.9CVSS5.4AI score0.00166EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/23 12:00 a.m.•29 views

PT-2026-4452

Name of the Vulnerable Software and Affected Versions Terms descriptions versions through 3.4.9 Description The software contains a flaw related to improper input handling during web page generation, leading to a DOM-Based Cross-site Scripting XSS condition. This allows for potential malicious co...

4.8CVSS5.8AI score0.00166EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/23 12:00 a.m.•0 views

CVE-2026-24621: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows DOM-Based XSS.This issue affects Terms descriptions: from n/a through = 3.4.9...

5.9CVSS5.8AI score0.00166EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/01/10 2:56 p.m.•15 views

WordPress Terms descriptions plugin <= 3.4.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Mrreee in WordPress Plugin Terms descriptions versions = 3.4.9...

4.8CVSS5.3AI score0.00166EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/01 3:32 p.m.•30 views

CVE-2025-62139

Insertion of Sensitive Information Into Sent Data vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows Retrieve Embedded Sensitive Data.This issue affects Terms descriptions: from n/a through = 3.4.10...

5.3CVSS5.9AI score0.00223EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/31 3:15 p.m.•16 views

CVE-2025-62139

Insertion of Sensitive Information Into Sent Data vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows Retrieve Embedded Sensitive Data.This issue affects Terms descriptions: from n/a through = 3.4.10...

5.3CVSS0.00223EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/31 3:08 p.m.•13 views

EUVD-2025-206039

Insertion of Sensitive Information Into Sent Data vulnerability in Vladimir Statsenko Terms descriptions allows Retrieve Embedded Sensitive Data.This issue affects Terms descriptions: from n/a through 3.4.9...

5.3CVSS6.4AI score0.00223EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/31 3:08 p.m.•78 views

CVE-2025-62139

CVE-2025-62139 affects the Terms descriptions plugin (versions

5.3CVSS5.9AI score0.00223EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/31 3:08 p.m.•7 views

CVE-2025-62139 WordPress Terms descriptions plugin <= 3.4.9 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Vladimir Statsenko Terms descriptions allows Retrieve Embedded Sensitive Data.This issue affects Terms descriptions: from n/a through 3.4.9...

5.3CVSS6.5AI score0.00223EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/31 3:08 p.m.•43 views

CVE-2025-62139 WordPress Terms descriptions plugin <= 3.4.10 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows Retrieve Embedded Sensitive Data.This issue affects Terms descriptions: from n/a through = 3.4.10...

5.3CVSS0.00223EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/12/31 3:05 p.m.•20 views

WordPress Terms descriptions plugin <= 3.4.10 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Muhammad Nur Ibnu Hubab in WordPress Plugin Terms descriptions versions = 3.4.10...

5.3CVSS5.9AI score0.00223EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2025/12/31 12:00 a.m.•14 views

WordPress plugin Terms descriptions 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.4AI score0.00223EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/31 12:00 a.m.•0 views

CVE-2025-62139: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows Retrieve Embedded Sensitive Data.This issue affects Terms descriptions: from n/a through = 3.4.10...

5.3CVSS5.8AI score0.00223EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/31 12:00 a.m.•15 views

PT-2025-54345

Name of the Vulnerable Software and Affected Versions Vladimir Statsenko Terms descriptions versions through 3.4.9 Description A flaw exists in Vladimir Statsenko Terms descriptions that allows retrieval of embedded sensitive data due to insertion of sensitive information into sent data...

5.3CVSS6.3AI score0.00223EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2023-32414

Malicious code in bioql PyPI...

7.1CVSS6.9AI score0.00382EPSS
SaveExploits0References1
Rows per page
Query Builder