Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 11:58 a.m.•12 views

CVE-2025-22362

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Daniel Bakovic WPAchievements Free wpachievements-free allows Stored XSS.This issue affects WPAchievements Free: from n/a through = 1.2.0...

6.5CVSS8.6AI score0.00223EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/07 11:15 a.m.•21 views

CVE-2025-22362

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Daniel Bakovic WPAchievements Free wpachievements-free allows Stored XSS.This issue affects WPAchievements Free: from n/a through = 1.2.0...

6.5CVSS0.00223EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/07 10:48 a.m.•30 views

CVE-2025-22362 WordPress WPAchievements Free Plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Daniel Bakovic WPAchievements Free wpachievements-free allows Stored XSS.This issue affects WPAchievements Free: from n/a through = 1.2.0...

6.5CVSS0.00223EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/07 12:00 a.m.•5 views

PT-2025-4474

Name of the Vulnerable Software and Affected Versions WPAchievements Free versions 1.2.0 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows stored Cross-site Scripting XSS. This means that an attacker can inject malicious...

6.5CVSS8.4AI score0.00223EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/01/07 12:00 a.m.•12 views

WordPress plugin WPAchievements Free – Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.5CVSS8.1AI score0.00223EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•6 views

CVE-2025-22362: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Daniel Bakovic WPAchievements Free wpachievements-free allows Stored XSS.This issue affects WPAchievements Free: from n/a through = 1.2.0...

6.5CVSS8.6AI score0.00223EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/03 1:50 p.m.•14 views

WordPress WPAchievements Free Plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 Patchstack Alliance in WordPress Plugin WPAchievements Free versions = 1.2.0...

6.5CVSS8.4AI score0.00223EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder