Lucene search
+L

189 matches found

OSV
OSV
added 2024/03/27 7:15 a.m.10 views

CVE-2024-29913

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Tutor LMS Elementor Addons allows Stored XSS.This issue affects Tutor LMS Elementor Addons: from n/a through 2.1.3...

5.4CVSS5.8AI score0.00336EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/27 7:02 a.m.88 views

CVE-2024-29913

CVE-2024-29913 is an improper input handling vulnerability causing Stored XSS in Tutor LMS Elementor Addons (Themeum). Affected: Tutor LMS Elementor Addons up to 2.1.3. Root cause: improper neutralization of input during web page generation. Impact: stored XSS. Remediation/patch details are not p...

6.5CVSS8.6AI score0.00336EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/12/28 11:15 a.m.8 views

CVE-2023-50859

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum WP Crowdfunding allows Stored XSS.This issue affects WP Crowdfunding: from n/a through 2.1.6...

5.4CVSS7.3AI score0.00277EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/28 11:15 a.m.31 views

CVE-2023-50859

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum WP Crowdfunding allows Stored XSS.This issue affects WP Crowdfunding: from n/a through 2.1.6...

6.5CVSS0.00277EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/28 10:16 a.m.54 views

CVE-2023-50859

The CVE-2023-50859 issue affects WordPress WP Crowdfunding (Themeum) up to version 2.1.6 and is a Stored XSS caused by improper neutralization of input during web page generation. Red Hat and Patchstack entries confirm the same vulnerability with the same affected software and indicate a patch ha...

6.5CVSS6.7AI score0.00277EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2023/12/15 4:15 p.m.26 views

CVE-2023-49829

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Tutor LMS – eLearning and online course solution allows Stored XSS.This issue affects Tutor LMS – eLearning and online course solution: from n/a through 2.2.4...

5.9CVSS0.00394EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/15 4:15 p.m.33 views

CVE-2023-49829

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Tutor LMS – eLearning and online course solution allows Stored XSS.This issue affects Tutor LMS – eLearning and online course solution: from n/a through 2.2.4...

4.8CVSS6.7AI score0.00394EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/15 4:15 p.m.22 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Tutor LMS – eLearning and online course solution allows Stored XSS.This issue affects Tutor LMS – eLearning and online course solution: from n/a through 2.2.4...

4.3CVSS7AI score0.00394EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/12/15 3:30 p.m.61 views

CVE-2023-49829

CVE-2023-49829 pertains to the Tutor LMS WordPress plugin (Tutor LMS – eLearning and online course solution) and describes an issue where input is not properly sanitized during web page generation, allowing stored XSS. Affected versions are Tutor LMS

5.9CVSS6.6AI score0.00394EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2023/11/14 10:15 p.m.24 views

CVE-2023-47532

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Themeum WP Crowdfunding plugin = 2.1.6 versions...

6.1CVSS0.00366EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/14 10:15 p.m.7 views

CVE-2023-47532

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Themeum WP Crowdfunding plugin = 2.1.6 versions...

6.1CVSS7.3AI score0.00366EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/14 10:15 p.m.27 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Themeum WP Crowdfunding plugin = 2.1.6 versions...

5.8CVSS6.1AI score0.00366EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/11/14 9:14 p.m.37 views

CVE-2023-47532

CVE-2023-47532 describes an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability in the Themeum WP Crowdfunding plugin for WordPress, affecting versions

6.1CVSS5.8AI score0.00366EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/14 9:14 p.m.29 views

CVE-2023-47532 WordPress WP Crowdfunding Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Themeum WP Crowdfunding plugin = 2.1.6 versions...

5.8CVSS6.1AI score0.00366EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/11/14 12:00 a.m.11 views

PT-2023-30492 · Themeum · Themeum Wp Crowdfunding Plugin

Name of the Vulnerable Software and Affected Versions: Themeum WP Crowdfunding plugin versions = 2.1.6 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially affecting...

6.1CVSS6.1AI score0.00366EPSS
SaveExploits0References3
NVD
NVD
added 2023/11/03 5:15 p.m.32 views

CVE-2023-25800

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeum Tutor LMS allows SQL Injection.This issue affects Tutor LMS: from n/a through 2.2.0...

8.8CVSS9.1AI score0.0069EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/03 5:15 p.m.35 views

CVE-2023-25700

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeum Tutor LMS allows SQL Injection.This issue affects Tutor LMS: from n/a through 2.1.10...

9.8CVSS7.9AI score0.00756EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/03 5:15 p.m.24 views

CVE-2023-25700

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeum Tutor LMS allows SQL Injection.This issue affects Tutor LMS: from n/a through 2.1.10...

9.8CVSS9.8AI score0.00756EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/03 5:15 p.m.22 views

CVE-2023-25990

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeum Tutor LMS allows SQL Injection.This issue affects Tutor LMS: from n/a through 2.1.10...

8.8CVSS7.9AI score0.00679EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/03 5:15 p.m.24 views

CVE-2023-25990

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeum Tutor LMS allows SQL Injection.This issue affects Tutor LMS: from n/a through 2.1.10...

8.8CVSS9.1AI score0.00679EPSS
SaveExploits0References1
Rows per page
Query Builder