3 matches found
EUVD-2024-49947
Malicious code in bioql PyPI...
6.4CVSS6.5AI score0.00288EPSS
SaveExploits0References2
CVE-2024-9452
The Branding plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inje...
5.4CVSS5.9AI score0.00288EPSS
SaveExploits0References2
WordPress Branding plugin <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability
Authenticated Author+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by Francesco Carlucci in WordPress Plugin Branding versions = 1.0...
6.4CVSS5.8AI score0.00288EPSS
SaveExploits0References1Affected Software1
20