Lucene search
+L

7042 matches found

OSV
OSV
added 2023/01/23 3:15 p.m.10 views

CVE-2022-4760

The OneClick Chat to Order WordPress plugin before 1.0.4.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against hi...

5.4CVSS5.8AI score0.00471EPSS
SaveExploits2References1
OSV
OSV
added 2023/01/23 3:15 p.m.11 views

CVE-2022-4706

The Genesis Columns Advanced WordPress plugin before 2.0.4 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks which could be used against...

5.4CVSS5.8AI score0.00471EPSS
SaveExploits2References1
Prion
Prion
added 2023/01/23 3:15 p.m.21 views

Cross site scripting

The Structured Content WordPress plugin before 1.5.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

4.9CVSS5.3AI score0.00471EPSS
SaveExploits2References1Affected Software1
CNNVD
CNNVD
added 2023/01/23 12:00 a.m.43 views

WordPress plugin ShiftNav 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

5.4CVSS5.4AI score0.00471EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2023/01/23 12:00 a.m.9 views

WordPress plugin OneClick Chat to Order 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.4CVSS5.4AI score0.00471EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2023/01/23 12:00 a.m.8 views

WordPress plugin Store Locator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

5.4CVSS5.4AI score0.00471EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2023/01/23 12:00 a.m.8 views

WordPress plugin The Print-O-Matic 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.4CVSS5.4AI score0.00471EPSS
SaveExploits2References2
BDU FSTEC
BDU FSTEC
added 2023/01/23 12:00 a.m.19 views

Vulnerability of the PM_io parser function: <PMDEC>::read_face() and store_iv() in the Nef_2/PM_io parser component. This is part of the CGAL computational geometry algorithm library. It allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the PMioparser function in the Nef2/PMioparser.h component of the computational geometry library CGAL is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...

10CVSS7.7AI score0.02014EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/01/23 12:00 a.m.15 views

Vulnerability of SNC_io parser <EW>: read_sedge(); seh->incident_sface(); component Nef_S2/SNC_io parser.h; library of computational geometry algorithms CGAL. This allows an intruder to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the SNCio parser function ::readsedge in the NefS2/SNCio parser component, located in the NefS2/SNCio parser.h file, and the associated CGAL computational geometry algorithm libraries, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker ...

9.3CVSS7.7AI score0.02299EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/01/23 12:00 a.m.14 views

Vulnerability of SNC_io parser<EW>: read_vertex(); vh->shalfloop(); component Nef_S2/SNC_io parser.h library of computational geometry algorithms CGAL, allowing an intruder to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SNCioparser function involves unvalidated array indexing. Exploitation of this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a specially created file. This vulnerability is related to the...

10CVSS7.7AI score0.02428EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/01/23 12:00 a.m.16 views

Vulnerability of SNC_io parser<EW>::read_volume() seh->twin() component Nef_S2/SNC_io parser.h library of computational geometry algorithms CGAL, allowing an intruder to access confidential data, compromise its integrity, and cause service failure.

The vulnerability of the SNCioparser function: readvolume, seh-twin in the NefS2/SNCioparser.h component, and the algorithms from the Computational Geometry Library CGAL are related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data...

9.3CVSS7.7AI score0.02413EPSS
SaveExploits1References8Affected Software3
CNNVD
CNNVD
added 2023/01/23 12:00 a.m.15 views

WordPress plugin The Genesis Columns Advanced 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

5.4CVSS5.4AI score0.00471EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2023/01/23 12:00 a.m.12 views

WordPress plugin WPZOOM Portfolio 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

5.4CVSS5.4AI score0.00471EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2023/01/23 12:00 a.m.24 views

Vulnerability of the SNC_io parser function <EW>::read_sface() and SD.link_as_face_cycle() in the Nef_S2/SNC_io parser.h component of the computational geometry algorithms library CGAL. This allows an attacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the SNCioparser function, namely readsface and SD.linkasfacecycle, in the NefS2/SNCioparser.h component, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...

10CVSS7.7AI score0.0229EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/01/23 12:00 a.m.27 views

Vulnerability of SNC_io parser<EW>::read_sedge() and seh->snext() in the Nef_S2/SNC_io parser.h file of the Computational Geometry Algorithms library. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.

Vulnerability of SNCio parser: The function readsedge in the NefS2/SNCio parser component relies on the snext function from the CGAL algorithm library. This vulnerability is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data...

10CVSS7.7AI score0.0228EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/01/23 12:00 a.m.16 views

Vulnerability of the SNC_io parser function <EW>: read_edge(), eh->incident_sface() in the Nef_S2/SNC_io parser.h component. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SNCioparser function lies in the use of readedge and eh-incidentsface functions. This vulnerability is associated with unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and even caus...

10CVSS7.7AI score0.02419EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/01/23 12:00 a.m.17 views

Vulnerability of SNC_io parser<EW>: read_sface(), sfh->center_vertex() function in the Nef_S2/SNC_io parser.h component, from the Computational Geometry Algorithms library. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.

Vulnerability of SNCio parser: ::readsface sfh-centervertex in the NefS2/SNCio parser.h file, belonging to the Computational Geometry Library CGAL. This vulnerability is related to unvalidated array indexing. Exploitation of this vulnerability allows an attacker to gain access to confidential dat...

9.3CVSS7.7AI score0.0228EPSS
SaveExploits1References8Affected Software3
CNNVD
CNNVD
added 2023/01/23 12:00 a.m.7 views

WordPress plugin Collapse-O-Matic 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

5.4CVSS5.4AI score0.00534EPSS
SaveExploits2References2
BDU FSTEC
BDU FSTEC
added 2023/01/23 12:00 a.m.20 views

Vulnerability of the SNC_io parser function <EW>::read_sedge() seh->next() in the Nef_S2/SNC_io parser.h file of the Computational Geometry Algorithms library. This allows an intruder to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SNCio parser function ::readsedge in the NefS2/SNCio parser component, located in the CGAL algorithm library for computational geometry, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data,...

8.8CVSS7.7AI score0.02314EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/01/23 12:00 a.m.13 views

Vulnerability of SNC_io parser<EW>::read_sedge() function: seh->source() of the Nef_S2/SNC_io parser.h component from the computational geometry algorithms library CGAL. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.

Vulnerability of SNCio parser: readsedge seh-source in the NefS2/SNCio parser.h file, part of the Computational Geometry Algorithms library. This vulnerability is related to unvalidated array indexing. Exploitation of this vulnerability allows unauthorized access to confidential data, compromisin...

9.3CVSS7.7AI score0.02299EPSS
SaveExploits1References8Affected Software3
Rows per page
Query Builder