Lucene search
+L

451 matches found

CNNVD
CNNVD
added 2025/03/03 12:0 a.m.7 views

WordPress plugin Swift Calendar Online Appointment Scheduling 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS5.9AI score0.00348EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/03/03 12:0 a.m.8 views

libhv 环境问题漏洞

libhv is an open source network library by ithewei that is easier to use than libevent/libuv/asio. An environment issue vulnerability exists in libhv 1.3.3 and earlier versions, which stems from inconsistent HTTP request interpretation and may result in HTTP response entrapment...

10CVSS6.7AI score0.00356EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/03 12:0 a.m.4 views

WordPress plugin WP Church Center 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS5.8AI score0.00276EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/02/21 12:0 a.m.6 views

WordPress Restrict Taxonomies Plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Restrict Taxonomies versions = 1.3.3...

7.1CVSS6.1AI score0.00276EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/02/13 12:0 a.m.11 views

PT-2025-7189

Name of the Vulnerable Software and Affected Versions: Elfsight Yottie Lite versions 1.3.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an attacker can inject malicio...

5.9CVSS8.4AI score0.0021EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/02/05 6:2 a.m.13 views

CVE-2024-49620

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mrcheck116 FERMA.ru.net ferma-ru-net-checkout allows Blind SQL Injection.This issue affects FERMA.ru.net: from n/a through = 1.3.3...

8.8CVSS5.9AI score0.00445EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 4:2 a.m.5 views

CVE-2024-54335

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ImmoSoft ImmoToolBox Connect immotoolbox-connect allows Reflected XSS.This issue affects ImmoToolBox Connect: from n/a through = 1.3.3...

7.1CVSS7.2AI score0.00339EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/02/02 4:8 p.m.5 views

WordPress WP Church Center Plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin WP Church Center versions = 1.3.3...

7.1CVSS6.1AI score0.00276EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2025/01/24 6:15 p.m.8 views

CVE-2025-24729

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ElementInvader ElementInvader Addons for Elementor allows Stored XSS. This issue affects ElementInvader Addons for Elementor: from n/a through 1.3.3...

5.4CVSS7.3AI score0.00309EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/24 6:15 p.m.36 views

CVE-2025-24729

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows Stored XSS.This issue affects ElementInvader Addons for Elementor: from n/a through = 1.3.3...

6.5CVSS0.00309EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/24 12:0 a.m.8 views

PT-2025-5543

Name of the Vulnerable Software and Affected Versions ElementInvader Addons for Elementor versions 1.3.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

6.5CVSS5.6AI score0.00309EPSS
SaveExploits0References7
CVE
CVE
added 2025/01/22 2:29 p.m.46 views

CVE-2025-23610

CVE-2025-23610 is a reflected XSS vulnerability in the Ultimate Events WordPress plugin. The issue is described as Improper Neutralization of Input During Web Page Generation, affecting Ultimate Events versions from n/a up to 1.3.3. Connected Red Hat advisory (RH:CV E-2025-23610) repeats the same...

7.1CVSS7.2AI score0.00385EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/22 12:0 a.m.8 views

WordPress plugin Ultimate Events 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.7AI score0.00385EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/01/16 6:41 p.m.9 views

WordPress Ultimate Events plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Ultimate Events versions = 1.3.3...

7.1CVSS6.1AI score0.00385EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/01/16 6:41 p.m.6 views

WordPress Swift Calendar Online Appointment Scheduling plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Swift Calendar Online Appointment Scheduling versions = 1.3.3...

7.1CVSS6.1AI score0.00348EPSS
SaveExploits0Affected Software1
SUSE CVE
SUSE CVE
added 2025/01/11 12:24 a.m.4 views

SUSE CVE-2024-51442

Command Injection in Minidlna version v1.3.3 and before allows an attacker to execute arbitrary OS commands via a specially crafted minidlna.conf configuration file...

8.8CVSS7.9AI score0.02232EPSS
SaveExploits0References3
OSV
OSV
added 2025/01/08 6:15 p.m.2 views

DEBIAN-CVE-2024-51442

Command Injection in Minidlna version v1.3.3 and before allows an attacker to execute arbitrary OS commands via a specially crafted minidlna.conf configuration file...

8.8CVSS5.8AI score0.02232EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/08 6:15 p.m.3 views

UBUNTU-CVE-2024-51442

Command Injection in Minidlna version v1.3.3 and before allows an attacker to execute arbitrary OS commands via a specially crafted minidlna.conf configuration file...

8.8CVSS6.1AI score0.02232EPSS
SaveExploits0References6
Patchstack
Patchstack
added 2025/01/07 12:35 p.m.6 views

WordPress WP Github plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin WP Github versions = 1.3.3...

6.5CVSS6.1AI score0.0034EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/01/07 12:0 a.m.7 views

WordPress plugin WP Github 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site...

6.5CVSS7.6AI score0.0034EPSS
SaveExploits0References2
Rows per page
Query Builder