Lucene search
K

38 matches found

RedhatCVE
RedhatCVE
added 2026/01/24 3:18 p.m.4 views

CVE-2026-24621

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows DOM-Based XSS.This issue affects Terms descriptions: from n/a through = 3.4.9...

5.9CVSS5.4AI score0.00059EPSS
Exploits0References1
NVD
NVD
added 2026/01/23 3:16 p.m.3 views

CVE-2026-24621

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows DOM-Based XSS.This issue affects Terms descriptions: from n/a through = 3.4.9...

5.9CVSS0.00059EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/23 2:29 p.m.2 views

CVE-2026-24621

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows DOM-Based XSS.This issue affects Terms descriptions: from n/a through = 3.4.9...

4.8CVSS5.9AI score0.00059EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/01/23 2:29 p.m.3 views

CVE-2026-24621 WordPress Terms descriptions plugin <= 3.4.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows DOM-Based XSS.This issue affects Terms descriptions: from n/a through = 3.4.9...

5.9CVSS5.4AI score0.00059EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/23 2:29 p.m.28 views

CVE-2026-24621 WordPress Terms descriptions plugin <= 3.4.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows DOM-Based XSS.This issue affects Terms descriptions: from n/a through = 3.4.9...

5.9CVSS0.00059EPSS
Exploits0References1
CVE
CVE
added 2026/01/23 2:29 p.m.6 views

CVE-2026-24621

CVE-2026-24621 is a DOM-based XSS in the WordPress Terms descriptions plugin (terms-descriptions) caused by improper input neutralization during web page generation. Affected: Terms descriptions plugin, versions n/a through 3.4.9. Impact per sources: DOM-based XSS could leak or alter content in t...

5.9CVSS5.4AI score0.00059EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/01/23 12:0 a.m.4 views

PT-2026-4452

Name of the Vulnerable Software and Affected Versions Terms descriptions versions through 3.4.9 Description The software contains a flaw related to improper input handling during web page generation, leading to a DOM-Based Cross-site Scripting XSS condition. This allows for potential malicious co...

4.8CVSS5.8AI score0.00059EPSS
Exploits0References4
Patchstack
Patchstack
added 2026/01/10 2:56 p.m.4 views

WordPress Terms descriptions plugin <= 3.4.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Mrreee in WordPress Plugin Terms descriptions versions = 3.4.9...

4.8CVSS5.3AI score0.00059EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/01 3:32 p.m.4 views

CVE-2025-62139

Insertion of Sensitive Information Into Sent Data vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows Retrieve Embedded Sensitive Data.This issue affects Terms descriptions: from n/a through = 3.4.10...

5.3CVSS5.9AI score0.00034EPSS
Exploits0References1
NVD
NVD
added 2025/12/31 3:15 p.m.2 views

CVE-2025-62139

Insertion of Sensitive Information Into Sent Data vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows Retrieve Embedded Sensitive Data.This issue affects Terms descriptions: from n/a through = 3.4.10...

5.3CVSS0.00034EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/31 3:8 p.m.0 views

CVE-2025-62139 WordPress Terms descriptions plugin <= 3.4.9 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Vladimir Statsenko Terms descriptions allows Retrieve Embedded Sensitive Data.This issue affects Terms descriptions: from n/a through 3.4.9...

5.3CVSS6.5AI score0.00034EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/31 3:8 p.m.3 views

EUVD-2025-206039

Insertion of Sensitive Information Into Sent Data vulnerability in Vladimir Statsenko Terms descriptions allows Retrieve Embedded Sensitive Data.This issue affects Terms descriptions: from n/a through 3.4.9...

5.3CVSS6.4AI score0.00034EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/31 3:8 p.m.22 views

CVE-2025-62139 WordPress Terms descriptions plugin <= 3.4.10 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows Retrieve Embedded Sensitive Data.This issue affects Terms descriptions: from n/a through = 3.4.10...

5.3CVSS0.00034EPSS
Exploits0References1
CVE
CVE
added 2025/12/31 3:8 p.m.3 views

CVE-2025-62139

CVE-2025-62139 affects the Terms descriptions plugin (versions

5.3CVSS5.9AI score0.00034EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/12/31 3:5 p.m.4 views

WordPress Terms descriptions plugin <= 3.4.10 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Muhammad Nur Ibnu Hubab in WordPress Plugin Terms descriptions versions = 3.4.10...

5.3CVSS5.9AI score0.00034EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2025/12/31 12:0 a.m.2 views

WordPress plugin Terms descriptions 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.4AI score0.00034EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/31 12:0 a.m.3 views

PT-2025-54345

Name of the Vulnerable Software and Affected Versions Vladimir Statsenko Terms descriptions versions through 3.4.9 Description A flaw exists in Vladimir Statsenko Terms descriptions that allows retrieval of embedded sensitive data due to insertion of sensitive information into sent data...

5.3CVSS6.3AI score0.00034EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-32414

Malicious code in bioql PyPI...

7.1CVSS6.9AI score0.00104EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-42372

Malicious code in bioql PyPI...

5.9CVSS6.6AI score0.00108EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/07/18 12:0 a.m.1 views

WordPress plugin Terms descriptions 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

4.4CVSS5.5AI score0.00164EPSS
Exploits0References3
Rows per page
Query Builder