Lucene search
K

10 matches found

RedhatCVE
RedhatCVE
added 2025/12/10 2:22 p.m.2 views

CVE-2025-10876

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Talent Software e-BAP Automation allows Cross-Site Scripting XSS.This issue affects e-BAP Automation: from 1.8.96 before v.41815...

5.3CVSS5.8AI score0.00032EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/09 6:30 p.m.2 views

EUVD-2025-202051

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in TalentSoft Software e-BAP Automation allows Cross-Site Scripting XSS.This issue affects e-BAP Automation: from 1.8.96 before v.41815...

5.3CVSS5.4AI score0.00032EPSS
Exploits0References2
NVD
NVD
added 2025/12/09 4:17 p.m.2 views

CVE-2025-10876

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Talent Software e-BAP Automation allows Cross-Site Scripting XSS.This issue affects e-BAP Automation: from 1.8.96 before v.41815...

5.3CVSS0.00032EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/09 1:49 p.m.2 views

CVE-2025-10876 XSS in Talent Software's e-Bap

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Talent Software e-BAP Automation allows Cross-Site Scripting XSS.This issue affects e-BAP Automation: from 1.8.96 before v.41815...

5.3CVSS5.5AI score0.00032EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.2 views

PT-2025-49863

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in TalentSoft Software e-BAP Automation allows Cross-Site Scripting XSS.This issue affects e-BAP Automation: from 1.8.96 before v.41815...

5.3CVSS5.9AI score0.00032EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 7:7 a.m.4 views

CVE-2024-13360

The AI Power: Complete AI Pack plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.8.96 via the wpaicgtroubleshootaddvector. This makes it possible for authenticated attackers, with subscriber-level access and above, to make web requests to...

5.4CVSS6.5AI score0.00164EPSS
Exploits0References1
CVE
CVE
added 2025/01/22 7:29 a.m.65 views

CVE-2025-0428

The CVE refers to WordPress plugin AI Power: Complete AI Pack (up to version 1.8.96). It is vulnerable to PHP Object Injection via deserialization of untrusted data in $form['post_content'] through wpaicg_export_prompts, exploitable by authenticated admins. There is no POP chain in the plugin its...

7.2CVSS7.2AI score0.00358EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2025/01/22 12:0 a.m.1 views

WordPress plugin AI Power 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

7.2CVSS8.6AI score0.00358EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/01/21 10:49 p.m.2 views

WordPress AI Power: Complete AI Pack plugin <= 1.8.96 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Shortcode Execution vulnerability discovered by mikemyers in WordPress Plugin GPT3 AI Content Writer versions = 1.8.96...

8.8CVSS7.1AI score0.00212EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2025/01/21 10:47 p.m.1 views

WordPress AI Power: Complete AI Pack plugin <= 1.8.96 - Authenticated (Subscriber+) Server-Side Request Forgery vulnerability

Authenticated Subscriber+ Server-Side Request Forgery vulnerability discovered by shaman0x01 in WordPress Plugin GPT3 AI Content Writer versions = 1.8.96...

5.4CVSS7AI score0.00164EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder