Lucene search
+L

38 matches found

Prion
Prion
added 2023/10/18 2:15 p.m.21 views

Cross site scripting

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in QROkes QR Twitter Widget plugin = 0.2.3 versions...

4.9CVSS5.2AI score0.0031EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/10/18 1:28 p.m.53 views

CVE-2023-45628

CVE-2023-45628 corresponds to a Stored XSS in the QROkes QR Twitter Widget WordPress plugin (

6.5CVSS5.5AI score0.0031EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/18 1:28 p.m.10 views

CVE-2023-45628 WordPress QR Twitter Widget Plugin <= 0.2.3 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in QROkes QR Twitter Widget plugin = 0.2.3 versions...

6.5CVSS5.6AI score0.0031EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/10/18 1:28 p.m.35 views

CVE-2023-45628 WordPress QR Twitter Widget Plugin <= 0.2.3 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in QROkes QR Twitter Widget plugin = 0.2.3 versions...

6.5CVSS6AI score0.0031EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/10/18 12:00 a.m.6 views

WordPress Plugin QR Twitter Widget Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS5.9AI score0.0031EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/10/11 12:00 a.m.17 views

WordPress QR Twitter Widget Plugin <= 0.2.3 is vulnerable to Cross Site Scripting (XSS)

Software QR Twitter Widget Type Plugin Vulnerable versions = 0.2.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-45628 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f0394f11539e Credits Mika Required privilege...

6.5CVSS5.7AI score0.0031EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2019/08/22 12:00 a.m.6 views

WordPress rimons-twitter-widget plugin cross-site scripting vulnerability

WordPress is a blogging platform developed in PHP by the WordPress Foundation. The platform supports personal blog sites on PHP and MySQL servers. rimons-twitter-widget is a plugin used in it to crawl posts on Twitter. A cross-site scripting vulnerability exists in the WordPress...

6.1CVSS6.3AI score0.00905EPSS
SaveExploits0References1
OSV
OSV
added 2019/08/20 4:15 p.m.6 views

CVE-2017-18533

The rimons-twitter-widget plugin before 1.3 for WordPress has XSS...

6.1CVSS5.8AI score0.00905EPSS
SaveExploits0References1
Prion
Prion
added 2019/08/20 4:15 p.m.13 views

Cross site scripting

The rimons-twitter-widget plugin before 1.3 for WordPress has XSS...

4.3CVSS6.4AI score0.00905EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2019/08/20 3:52 p.m.56 views

CVE-2017-18533

The Red Hat and other feeds confirm CVE-2017-18533 is an XSS vulnerability in the Rimons Twitter Widget WordPress plugin, affecting versions before 1.3. The vulnerability arises in the rimons-twitter-widget plugin for WordPress and is documented by multiple sources (NVD, CNVD, PRION, CVE listings...

6.1CVSS6.4AI score0.00905EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2017/04/16 12:00 a.m.16 views

Rimons Twitter Widget < 1.3 - XSS

The Rimons Twitter Widget WordPress plugin was affected by a XSS security vulnerability...

4.3CVSS2.1AI score0.00905EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2017/01/03 12:00 a.m.2 views

Reflected Cross-Site Scripting Vulnerability in WordPress Plugin Zhina Twitter Widget

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A reflective cross-site scripting vulnerability exists in the WordPress plugin Zhina Twitter Widget 'phoenixsearch.php' page, which can be exploited by attackers to...

6.8AI score
SaveExploits0
NVD
NVD
added 2014/02/02 8:55 p.m.20 views

CVE-2013-0234

Cross-site scripting XSS vulnerability in the Twitter widget in Elgg before 1.7.17 and 1.8.x before 1.8.13 allows remote attackers to inject arbitrary web script or HTML via the paramstwitterusername parameter to action/widgets/save...

4.3CVSS5.7AI score0.01457EPSS
SaveExploits1References8
Prion
Prion
added 2014/02/02 8:55 p.m.20 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Twitter widget in Elgg before 1.7.17 and 1.8.x before 1.8.13 allows remote attackers to inject arbitrary web script or HTML via the paramstwitterusername parameter to action/widgets/save...

4.3CVSS6.2AI score0.01457EPSS
SaveExploits1References8Affected Software1
Cvelist
Cvelist
added 2014/02/02 8:00 p.m.31 views

CVE-2013-0234

Cross-site scripting XSS vulnerability in the Twitter widget in Elgg before 1.7.17 and 1.8.x before 1.8.13 allows remote attackers to inject arbitrary web script or HTML via the paramstwitterusername parameter to action/widgets/save...

5.7AI score0.01457EPSS
SaveExploits1References8
NVD
NVD
added 2013/02/12 8:55 p.m.26 views

CVE-2011-5257

Multiple cross-site scripting XSS vulnerabilities in the Classipress theme before 3.1.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 twitterid parameter related to the Twitter widget and 2 facebookid parameter related to the Facebook widget...

4.3CVSS5.9AI score0.03788EPSS
SaveExploits2References4
Prion
Prion
added 2013/02/12 8:55 p.m.23 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Classipress theme before 3.1.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 twitterid parameter related to the Twitter widget and 2 facebookid parameter related to the Facebook widget...

4.3CVSS6.2AI score0.03788EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
added 2013/02/12 8:00 p.m.37 views

CVE-2011-5257

Multiple cross-site scripting XSS vulnerabilities in the Classipress theme before 3.1.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 twitterid parameter related to the Twitter widget and 2 facebookid parameter related to the Facebook widget...

5.9AI score0.03788EPSS
SaveExploits2References4
Rows per page
Query Builder