Lucene search
+L

10 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 9:17 a.m.•23 views

CVE-2025-23933

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpfreeware WpF Ultimate Carousel wpf-ultimate-carousel allows Stored XSS.This issue affects WpF Ultimate Carousel: from n/a through = 1.0.11...

6.5CVSS8.1AI score0.00236EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-3548

Malicious code in bioql PyPI...

6.5CVSS7.9AI score0.00236EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/16 9:15 p.m.•47 views

CVE-2025-23933

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpfreeware WpF Ultimate Carousel wpf-ultimate-carousel allows Stored XSS.This issue affects WpF Ultimate Carousel: from n/a through = 1.0.11...

6.5CVSS0.00236EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/16 8:07 p.m.•38 views

CVE-2025-23933 WordPress WpF Ultimate Carousel plugin <= 1.0.11 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpfreeware WpF Ultimate Carousel wpf-ultimate-carousel allows Stored XSS.This issue affects WpF Ultimate Carousel: from n/a through = 1.0.11...

6.5CVSS0.00236EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/16 8:07 p.m.•81 views

CVE-2025-23933

CVE-2025-23933 affects WpF Ultimate Carousel (WpFreeware) up to version 1.0.11 with Stored XSS due to improper input neutralization during web page generation. Public sources (Red Hat and Wordfence) confirm this vulnerability exists and is currently Unpatched; no exploitation details are provided...

6.5CVSS7.2AI score0.00236EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/16 8:07 p.m.•15 views

CVE-2025-23933 WordPress WpF Ultimate Carousel plugin <= 1.0.11 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpfreeware WpF Ultimate Carousel wpf-ultimate-carousel allows Stored XSS.This issue affects WpF Ultimate Carousel: from n/a through = 1.0.11...

6.5CVSS7.2AI score0.00236EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/16 6:43 p.m.•21 views

WordPress WpF Ultimate Carousel plugin <= 1.0.11 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin WpF Ultimate Carousel versions = 1.0.11...

6.5CVSS5.8AI score0.00236EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/16 12:00 a.m.•9 views

CVE-2025-23933: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpfreeware WpF Ultimate Carousel wpf-ultimate-carousel allows Stored XSS.This issue affects WpF Ultimate Carousel: from n/a through = 1.0.11...

6.5CVSS5.8AI score0.00236EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/16 12:00 a.m.•18 views

WordPress plugin WpF Ultimate Carousel has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.8AI score0.00236EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/01/16 12:00 a.m.•5 views

PT-2025-5212

Name of the Vulnerable Software and Affected Versions WpF Ultimate Carousel versions 1.0.11 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject malicio...

6.5CVSS0.00236EPSS
SaveExploits0References6
Rows per page
Query Builder