Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/10/16 4:56 p.m.2 views

CVE-2025-62380

mailgen is a Node.js package that generates responsive HTML e-mails for sending transactional mail. Mailgen versions through 2.0.31 contain an HTML injection vulnerability in plaintext emails generated with the generatePlaintext method when user generated content is supplied. The plaintext...

6.3CVSS7.5AI score0.0013EPSS
Exploits0References1
CVE
CVE
added 2025/10/15 4:52 p.m.4 views

CVE-2025-62380

Mailgen (Node.js) versions up to 2.0.31 expose an HTML injection/XSS risk in plaintext output generated by generatePlaintext. The plaintext cleaning code strips HTML tags with a regex, decodes HTML entities, and then replaces decoded content; however, HTML tags containing certain Unicode line sep...

6.3CVSS7AI score0.0013EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/07/09 7:38 a.m.2 views

WordPress Extensions for Elementor plugin <= 2.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via EE Events and EE Flipbox Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via EE Events and EE Flipbox Widget vulnerability discovered by stealthcopter in WordPress Plugin Extensions for Elementor versions = 2.0.32...

6.4CVSS5.8AI score0.00429EPSS
Exploits0References1Affected Software1
CBLMariner
CBLMariner
added 2022/04/09 6:51 a.m.20 views

CVE-2021-3467 affecting package jasper for versions less than 2.0.32-2

CVE-2021-3467 affecting package jasper for versions less than 2.0.32-2. An upgraded version of the package is available that resolves this issue...

5.5CVSS5.7AI score0.00266EPSS
Exploits0
CBLMariner
CBLMariner
added 2022/04/09 6:51 a.m.18 views

CVE-2021-26927 affecting package jasper for versions less than 2.0.32-2

CVE-2021-26927 affecting package jasper for versions less than 2.0.32-2. An upgraded version of the package is available that resolves this issue...

5.5CVSS6.4AI score0.00324EPSS
Exploits1
Packet Storm
Packet Storm
added 2021/06/30 12:0 a.m.159 views

Securepoint SSL VPN Client 2.0.30 Local Privilege Escalation

Local Privilege Escalation in Securepoint SSL VPN Client 2.0.30 Metadata =================================================== Release Date: 29-Jun-2021 Author: Florian Bogner @ https://bee-itsecurity.at Affected product: Securepoint SSL VPN Client Fixed in: version 2.0.32 Tested on: Windows 10 x64...

0.6AI score0.00151EPSS
Exploits3
Patchstack
Patchstack
added 2021/03/29 12:0 a.m.17 views

WordPress WorkScout premium theme <= 2.0.31 - Cross-Frame Scripting (XFS) vulnerability

Cross-Frame Scripting XFS vulnerability discovered by m0ze Patchstack Red Team in WordPress WorkScout premium theme versions = 2.0.31. Solution Update the WordPress WorkScout premium theme to the latest available version at least 2.0.32...

2AI score
Exploits0References1Affected Software1
Rows per page
Query Builder