Lucene search
+L

6 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-4731

Malicious code in bioql PyPI...

6.4CVSS9.1AI score0.00426EPSS
SaveExploits0References5
NVD
NVD
•added 2025/02/19 8:15 a.m.•13 views

CVE-2024-13462

The WP Wiki Tooltip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wiki' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00426EPSS
SaveExploits0References4
CVE
CVE
•added 2025/02/19 7:32 a.m.•44 views

CVE-2024-13462

CVE-2024-13462 (WP Wiki Tooltip, WordPress) : Stored XSS via the wiki shortcode in all versions up to 2.0.2; requires authenticated access at contributor level or higher to inject scripts, which execute when users load the affected pages. Connected data indicates a potential fix in 2.0.3, but ini...

6.4CVSS5.7AI score0.00426EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/02/19 7:32 a.m.•6 views

CVE-2024-13462 WP Wiki Tooltip <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

The WP Wiki Tooltip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wiki' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.8AI score0.00426EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/02/19 7:32 a.m.•24 views

CVE-2024-13462 WP Wiki Tooltip <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

The WP Wiki Tooltip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wiki' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00426EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/19 12:00 a.m.•1 views

CVE-2024-13462: Improper Neutralization of Input During Web Page Generation

The WP Wiki Tooltip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wiki' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS6AI score0.00426EPSS
SaveExploits0References1
Rows per page
Query Builder