Lucene search
+L

845 matches found

CVE
CVE
•added 2024/11/19 4:31 p.m.•45 views

CVE-2024-51872

CVE-2024-51872 — The connected data confirms a Stored XSS in the WordPress plugin Luzuk Testimonials. Affected: Luzuk Testimonials (WordPress plugin) versions from n/a up through 0.0.1. Root cause: Improper neutralization of input during web page generation, leading to cross-site scripting. Impac...

6.5CVSS7.2AI score0.00315EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/19 4:31 p.m.•21 views

CVE-2024-51872 WordPress Luzuk Testimonials plugin <= 0.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in luzuk Themes Luzuk Testimonials luzuk-testimonials allows Stored XSS.This issue affects Luzuk Testimonials: from n/a through = 0.0.1...

6.5CVSS0.00315EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/19 4:30 p.m.•18 views

CVE-2024-51936 WordPress ESB Testimonials plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Henry ESB Testimonials allows Stored XSS.This issue affects ESB Testimonials: from n/a through 1.0.0...

6.5CVSS6.7AI score0.00241EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/19 4:30 p.m.•65 views

CVE-2024-51936

CVE-2024-51936 is a Stored XSS in the WordPress ESB Testimonials plugin (affected: 1.0.0 and earlier). Root cause: improper neutralization during web page generation. Impact per sources: stored script execution potentially affecting site visitors. Remediation: update to a fixed version (per PT Se...

6.5CVSS7.2AI score0.00241EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/19 4:30 p.m.•33 views

CVE-2024-51936 WordPress ESB Testimonials plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eSparkBiz ESB Testimonials esb-testimonials allows Stored XSS.This issue affects ESB Testimonials: from n/a through = 1.0.0...

6.5CVSS0.00241EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•1 views

CVE-2024-51806: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shingo Awesome Fitness Testimonials awesome-fitness-testimonials allows Stored XSS.This issue affects Awesome Fitness Testimonials: from n/a through = 1.0.1...

6.5CVSS5.8AI score0.00377EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•2 views

CVE-2024-51872: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in luzuk Themes Luzuk Testimonials luzuk-testimonials allows Stored XSS.This issue affects Luzuk Testimonials: from n/a through = 0.0.1...

6.5CVSS5.8AI score0.00315EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/19 12:00 a.m.•14 views

PT-2024-35069 · Unknown · Web Testimonials

Name of the Vulnerable Software and Affected Versions: ESB Testimonials versions 1.0.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into the...

6.5CVSS6.7AI score0.00241EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•1 views

CVE-2024-51936: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eSparkBiz ESB Testimonials esb-testimonials allows Stored XSS.This issue affects ESB Testimonials: from n/a through = 1.0.0...

6.5CVSS5.8AI score0.00241EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/19 12:00 a.m.•10 views

WordPress plugin Awesome Fitness Testimonials 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.4AI score0.00377EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/13 2:02 a.m.•18 views

CVE-2024-8985 Social Proof (Testimonials) Slider <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via spslider-block Shortcode

The Social Proof Testimonial Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's spslider-block shortcode in all versions up to, and including, 2.2.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possibl...

6.4CVSS5.9AI score0.0043EPSS
SaveExploits0References4
NVD
NVD
•added 2024/11/09 2:15 p.m.•31 views

CVE-2024-51614

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aajoda Aajoda Testimonials aajoda-testimonials allows Stored XSS.This issue affects Aajoda Testimonials: from n/a through = 2.2.2...

6.5CVSS0.00239EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/09 2:04 p.m.•14 views

CVE-2024-51614 WordPress Aajoda Testimonials plugin <= 2.2.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aajoda Aajoda Testimonials aajoda-testimonials allows Stored XSS.This issue affects Aajoda Testimonials: from n/a through = 2.2.2...

6.5CVSS5.9AI score0.00239EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/09 2:04 p.m.•56 views

CVE-2024-51614 WordPress Aajoda Testimonials plugin <= 2.2.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aajoda Aajoda Testimonials aajoda-testimonials allows Stored XSS.This issue affects Aajoda Testimonials: from n/a through = 2.2.2...

6.5CVSS0.00239EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/09 2:04 p.m.•62 views

CVE-2024-51614

CVE-2024-51614 affects WordPress plugin “Aajoda Testimonials” (

6.5CVSS5.9AI score0.00239EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/09 12:00 a.m.•0 views

CVE-2024-51614: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aajoda Aajoda Testimonials aajoda-testimonials allows Stored XSS.This issue affects Aajoda Testimonials: from n/a through = 2.2.2...

6.5CVSS5.8AI score0.00239EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/09 12:00 a.m.•26 views

PT-2024-34757 · Unknown · Aajoda Testimonials

Name of the Vulnerable Software and Affected Versions: Aajoda Testimonials versions n/a through 2.2.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS in Aajoda Testimonials...

6.5CVSS5.8AI score0.00239EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/11/09 12:00 a.m.•13 views

WordPress plugin Aajoda Testimonials 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.9AI score0.00239EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/11/08 5:31 p.m.•14 views

WordPress ESB Testimonials plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin ESB Testimonials versions = 1.0.0...

6.5CVSS6.1AI score0.00241EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/11/08 2:52 p.m.•7 views

WordPress Luzuk Testimonials plugin <= 0.0.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Luzuk Testimonials versions = 0.0.1...

6.5CVSS6.1AI score0.00315EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder