Lucene search
+L

294 matches found

NVD
NVD
added 2024/03/15 2:15 p.m.26 views

CVE-2024-25597

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Etoile Web Design Ultimate Reviews allows Stored XSS.This issue affects Ultimate Reviews: from n/a through 3.2.8...

7.1CVSS6.9AI score0.00375EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/15 2:01 p.m.77 views

CVE-2024-25597

CVE-2024-25597 affects WordPress plugin Ultimate Reviews (Etoile Web Design) up to version 3.2.8. The issue is unauthorized, stored XSS triggered via the reviews feature due to improper input handling during page generation. The vulnerability is addressed in version 3.2.9 (patched). No exploitati...

7.1CVSS8.6AI score0.00375EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/03/15 2:01 p.m.38 views

CVE-2024-25597 WordPress Ultimate Reviews plugin <= 3.2.8 - Unauthenticated Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Etoile Web Design Ultimate Reviews allows Stored XSS.This issue affects Ultimate Reviews: from n/a through 3.2.8...

7.1CVSS7AI score0.00375EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2024/03/13 5:29 a.m.8 views

df543ghfdzr.webdesign-inspiration.com Cross Site Scripting vulnerability OBB-3870264

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/03/10 10:27 a.m.12 views

best-web-design-tools.com Cross Site Scripting vulnerability OBB-3868752

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Fedora
Fedora
added 2024/03/07 10:33 p.m.31 views

[SECURITY] Fedora 40 Update: velocity-2.3-5.fc40

Velocity is a Java-based template engine. It permits anyone to use the simple yet powerful template language to reference objects defined in Java code. When Velocity is used for web development, Web designers can work in parallel with Java programmers to develop web sites according to the...

8.8CVSS7.2AI score0.02578EPSS
SaveExploits3
OSV
OSV
added 2023/10/04 11:15 a.m.11 views

CVE-2023-25980

Cross-Site Request Forgery CSRF vulnerability in CAGE Web Design | Rolf van Gelder Optimize Database after Deleting Revisions plugin = 5.1 versions...

8.8CVSS7.3AI score0.00253EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/04 11:15 a.m.28 views

CVE-2023-25980

Cross-Site Request Forgery CSRF vulnerability in CAGE Web Design | Rolf van Gelder Optimize Database after Deleting Revisions plugin = 5.1 versions...

8.8CVSS5.8AI score0.00253EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/04 11:15 a.m.16 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in CAGE Web Design | Rolf van Gelder Optimize Database after Deleting Revisions plugin = 5.1 versions...

6.8CVSS8.8AI score0.00253EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/10/04 10:25 a.m.55 views

CVE-2023-25980

CVE-2023-25980 concerns the WordPress plugin “Optimize Database after Deleting Revisions” (CAGE Web Design) with CSRF vulnerability in versions

8.8CVSS6.5AI score0.00253EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/10/04 12:00 a.m.9 views

PT-2023-20405 · Cage Web Design · Optimize Database After Deleting Revisions

Name of the Vulnerable Software and Affected Versions: CAGE Web Design | Rolf van Gelder Optimize Database after Deleting Revisions plugin versions = 5.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended...

8.8CVSS8.8AI score0.00253EPSS
SaveExploits0References5
OSV
OSV
added 2023/08/30 4:15 p.m.8 views

CVE-2023-32294

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Radical Web Design GDPR Cookie Consent Notice Box plugin = 1.1.6 versions...

4.8CVSS7.3AI score0.00439EPSS
SaveExploits1References1
NVD
NVD
added 2023/08/30 4:15 p.m.23 views

CVE-2023-32294

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Radical Web Design GDPR Cookie Consent Notice Box plugin = 1.1.6 versions...

5.9CVSS5.4AI score0.00439EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2023/08/30 3:00 p.m.13 views

CVE-2023-32294 WordPress GDPR Cookie Consent Notice Box Plugin <= 1.1.6 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Radical Web Design GDPR Cookie Consent Notice Box plugin = 1.1.6 versions...

5.9CVSS5.6AI score0.00439EPSS
SaveExploits1References1
CVE
CVE
added 2023/08/30 3:00 p.m.52 views

CVE-2023-32294

CVE-2023-32294 – Stored XSS in GDPR Cookie Consent Notice Box plugin for WordPress . Affected: Radical Web Design GDPR Cookie Consent Notice Box plugin versions

5.9CVSS5AI score0.00439EPSS
SaveExploits1References1Affected Software1
HackRead
HackRead
added 2023/08/29 12:00 a.m.23 views

5 Effective Web Design Strategies to Increase Your ROI

By Owais Sultan Return on investment ROI is one of the most important metrics in the business landscape, as it captures… This is a post from HackRead.com Read the original post: 5 Effective Web Design Strategies to Increase Your ROI...

6.9AI score
SaveExploits0
NVD
NVD
added 2023/07/17 3:15 p.m.23 views

CVE-2023-34005

Cross-Site Request Forgery CSRF vulnerability in Etoile Web Design Front End Users plugin = 3.2.24 versions...

8.8CVSS0.00318EPSS
SaveExploits0References1
Prion
Prion
added 2023/07/17 3:15 p.m.24 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Etoile Web Design Front End Users plugin = 3.2.24 versions...

6.8CVSS8.8AI score0.00318EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/07/17 2:46 p.m.55 views

CVE-2023-34005

CVE-2023-34005 describes a CSRF vulnerability in the Etoile Web Design Front End Users plugin for WordPress, affecting versions ≤ 3.2.24. The vulnerability allows unauthenticated actors to trigger actions on behalf of a logged-in user; patch 3.2.25 fixes this issue. PatchStack notes the vulnerabi...

8.8CVSS7.7AI score0.00318EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/07/17 2:46 p.m.31 views

CVE-2023-34005 WordPress Front End Users Plugin <= 3.2.24 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Etoile Web Design Front End Users plugin = 3.2.24 versions...

6.5CVSS9AI score0.00318EPSS
SaveExploits0References1
Rows per page
Query Builder