Lucene search
K

19 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 2:57 p.m.1 views

CVE-2026-0677

Deserialization of Untrusted Data vulnerability in TotalSuite TotalContest Lite totalcontest-lite allows Object Injection.This issue affects TotalContest Lite: from n/a through = 2.9.1...

7.2CVSS5.9AI score0.00011EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/20 12:31 p.m.0 views

EUVD-2026-13657

Deserialization of Untrusted Data vulnerability in TotalSuite TotalContest Lite allows Object Injection.This issue affects TotalContest Lite: from n/a through 2.9.1...

7.2CVSS5.8AI score0.00011EPSS
Exploits0References2
NVD
NVD
added 2026/03/20 10:16 a.m.1 views

CVE-2026-0677

Deserialization of Untrusted Data vulnerability in TotalSuite TotalContest Lite totalcontest-lite allows Object Injection.This issue affects TotalContest Lite: from n/a through = 2.9.1...

0.00011EPSS
Exploits0References1
CVE
CVE
added 2026/03/20 9:31 a.m.3 views

CVE-2026-0677

CVE-2026-0677 describes a Deserialization of Untrusted Data vulnerability in WordPress plugin TotalContest Lite (TotalSuite TotalContest Lite) that allows PHP Object Injection in TotalContest Lite versions up to 2.9.1. Connected documents consistently cite the same description across RH, CIRCL si...

7.2CVSS5.9AI score0.00011EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/20 9:31 a.m.19 views

CVE-2026-0677 WordPress TotalContest Lite plugin <= 2.9.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in TotalSuite TotalContest Lite totalcontest-lite allows Object Injection.This issue affects TotalContest Lite: from n/a through = 2.9.1...

0.00011EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/20 9:31 a.m.3 views

CVE-2026-0677 WordPress TotalContest Lite plugin <= 2.9.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in TotalSuite TotalContest Lite allows Object Injection.This issue affects TotalContest Lite: from n/a through 2.9.1...

7.2CVSS5.8AI score0.00011EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/20 9:31 a.m.3 views

CVE-2026-0677

Deserialization of Untrusted Data vulnerability in TotalSuite TotalContest Lite allows Object Injection.This issue affects TotalContest Lite: from n/a through 2.9.1...

7.2CVSS5.8AI score0.00011EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/20 12:0 a.m.4 views

WordPress plugin TotalContest Lite 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.2CVSS5.9AI score0.00011EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/03/10 10:36 a.m.2 views

WordPress TotalContest Lite plugin <= 2.9.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by hhhai in WordPress Plugin TotalContest Lite versions = 2.9.1...

7.2CVSS5.8AI score0.00011EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2025/12/31 12:0 a.m.4 views

WordPress Total Contest Lite plugin < 2.9.0 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin TotalContest Lite versions 2.9.0...

6.1CVSS8.3AI score0.00102EPSS
Exploits1References1Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-11591

Malicious code in bioql PyPI...

7.1CVSS6.6AI score0.00219EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/25 6:22 p.m.3 views

CVE-2025-23782

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TotalSuite TotalContest Lite totalcontest-lite allows Reflected XSS.This issue affects TotalContest Lite: from n/a through = 2.8.1...

7.1CVSS5.9AI score0.00219EPSS
Exploits0References1
NVD
NVD
added 2025/04/17 4:15 p.m.3 views

CVE-2025-23782

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TotalSuite TotalContest Lite totalcontest-lite allows Reflected XSS.This issue affects TotalContest Lite: from n/a through = 2.8.1...

7.1CVSS0.00219EPSS
Exploits0References1
CVE
CVE
added 2025/04/17 3:48 p.m.38 views

CVE-2025-23782

CVE-2025-23782 affects WordPress TotalContest Lite (TotalContest Lite plugin) with versions up to 2.8.1. The issue is a Reflected Cross-Site Scripting (XSS) vulnerability caused by improper neutralization of user input during web page generation. Impact is described as via Reflected XSS, with CVS...

7.1CVSS5.9AI score0.00219EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/17 3:48 p.m.5 views

CVE-2025-23782 WordPress TotalContest Lite Plugin <= 2.8.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TotalSuite TotalContest Lite totalcontest-lite allows Reflected XSS.This issue affects TotalContest Lite: from n/a through = 2.8.1...

7.1CVSS5.9AI score0.00219EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/17 3:48 p.m.13 views

CVE-2025-23782 WordPress TotalContest Lite Plugin <= 2.8.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TotalSuite TotalContest Lite totalcontest-lite allows Reflected XSS.This issue affects TotalContest Lite: from n/a through = 2.8.1...

7.1CVSS0.00219EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/17 12:0 a.m.3 views

PT-2025-17024 · Unknown · Totalcontest Lite

Name of the Vulnerable Software and Affected Versions: TotalContest Lite versions through 2.8.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations: For versions through...

7.1CVSS6.4AI score0.00219EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/04/17 12:0 a.m.2 views

WordPress plugin TotalContest Lite 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...

7.1CVSS6.1AI score0.00219EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/01/16 6:42 p.m.3 views

WordPress TotalContest Lite Plugin <= 2.8.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin TotalContest Lite versions = 2.8.1...

7.1CVSS6.1AI score0.00219EPSS
Exploits0Affected Software1
Rows per page
Query Builder