Lucene search
+L

426 matches found

Patchstack
Patchstack
added 2025/12/15 6:06 p.m.17 views

WordPress HandL UTM Grabber / Tracker plugin <= 2.8.0 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Alex Tselevich nos3curity in WordPress Plugin HandL UTM Grabber versions = 2.8.0...

7.1CVSS6.1AI score0.00169EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/11 6:03 a.m.32 views

CVE-2025-13073

The HandL UTM Grabber / Tracker WordPress plugin before 2.8.1 does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS6AI score0.00169EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/11 6:03 a.m.28 views

CVE-2025-13072

The HandL UTM Grabber / Tracker WordPress plugin before 2.8.1 does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS6AI score0.00169EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/10 6:30 a.m.12 views

EUVD-2025-202398

The HandL UTM Grabber / Tracker WordPress plugin before 2.8.1 does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS5.6AI score0.00169EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/10 6:15 a.m.9 views

CVE-2025-13073

The HandL UTM Grabber / Tracker WordPress plugin before 2.8.1 does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS0.00169EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/10 6:00 a.m.45 views

CVE-2025-13073 HandL UTM Grabber / Tracker < 2.8.1 - Reflected XSS via handl_landing_page

The HandL UTM Grabber / Tracker WordPress plugin before 2.8.1 does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

0.00169EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/10 6:00 a.m.40 views

CVE-2025-13073

CVE-2025-13073 refers to the HandL UTM Grabber / Tracker WordPress plugin (versions before 2.8.1). The issue is a Reflected Cross‑Site Scripting flaw where a parameter is output without proper sanitization/escaping, enabling an attacker to potentially affect high‑privilege users (e.g., admin). Af...

7.1CVSS5.7AI score0.00169EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/10 6:00 a.m.4 views

CVE-2025-13072 HandL UTM Grabber / Tracker < 2.8.1 - Reflected XSS via utm_source

The HandL UTM Grabber / Tracker WordPress plugin before 2.8.1 does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

5.7AI score0.00169EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/10 6:00 a.m.41 views

CVE-2025-13072 HandL UTM Grabber / Tracker < 2.8.1 - Reflected XSS via utm_source

The HandL UTM Grabber / Tracker WordPress plugin before 2.8.1 does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

0.00169EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/10 6:00 a.m.33 views

CVE-2025-13072

The HandL UTM Grabber / Tracker WordPress plugin (versions prior to 2.8.1) is affected by CVE-2025-13072 due to improper sanitization/escaping of a parameter before it is reflected back on the page, enabling a Reflected XSS that could target high-privilege users such as admins. The issue is confi...

7.1CVSS5.7AI score0.00169EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/10 12:00 a.m.10 views

WordPress plugin HandL UTM Grabber / Tracker 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A security...

7.1CVSS5.9AI score0.00169EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2019-0859

Malware in sbrugna...

7.8CVSS7.6AI score0.01841EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2016-8253

Malware in sbrugna...

4.4CVSS4.8AI score0.00538EPSS
SaveExploits2References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2014-2573

Malware in sbrugna...

7.8CVSS6.4AI score0.03068EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2010-2300

Malware in sbrugna...

4.3CVSS6.4AI score0.01327EPSS
SaveExploits1References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2020-17714

Malware in sbrugna...

9.8CVSS9.2AI score0.0444EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2016-3152

Malware in sbrugna...

6.1CVSS6.3AI score0.0277EPSS
SaveExploits2References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2019-0817

Malware in sbrugna...

7.5CVSS7.6AI score0.02739EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2017-8193

Malware in sbrugna...

9.3CVSS8.2AI score0.00611EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2021-23383

Malware in sbrugna...

8.8CVSS8.6AI score0.0145EPSS
SaveExploits0References2
Rows per page
Query Builder