Lucene search
K

23 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-4352

Malicious code in bioql PyPI...

6.5CVSS8.7AI score0.00187EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-9088

Malicious code in bioql PyPI...

7.1CVSS9AI score0.00219EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 7:23 p.m.4 views

CVE-2021-24745

The About Author Box WordPress plugin before 1.0.2 does not sanitise and escape the Social Profiles field values before outputting them in attributes, which could allow user with a role as low as contributor to perform Cross-Site Scripting attacks...

5.4CVSS6.1AI score0.00197EPSS
Exploits2References1
NVD
NVD
added 2025/04/01 6:15 a.m.5 views

CVE-2025-30808

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Weblizar - WordPress Themes & Plugin About Author about-author allows Reflected XSS.This issue affects About Author: from n/a through = 1.6.2...

7.1CVSS0.00219EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/01 5:31 a.m.4 views

CVE-2025-30808 WordPress About Author plugin <= 1.6.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Weblizar - WordPress Themes & Plugin About Author about-author allows Reflected XSS.This issue affects About Author: from n/a through = 1.6.2...

7.1CVSS7.3AI score0.00219EPSS
Exploits0References1
CVE
CVE
added 2025/04/01 5:31 a.m.44 views

CVE-2025-30808

CVE-2025-30808 is a reflected XSS in the WordPress plugin About Author . Connected docs confirm the issue affects the plugin’s vulnerability surface up to version 1.6.2 . Root cause: Improper Neutralization of Input During Web Page Generation . Impact, as per metrics: High (CVSS 3.1 base 7.1) wit...

7.1CVSS8.6AI score0.00219EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/01 5:31 a.m.12 views

CVE-2025-30808 WordPress About Author plugin <= 1.6.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Weblizar - WordPress Themes & Plugin About Author about-author allows Reflected XSS.This issue affects About Author: from n/a through = 1.6.2...

7.1CVSS0.00219EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/01 12:0 a.m.1 views

WordPress plugin About Author 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.6AI score0.00219EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/04/01 12:0 a.m.2 views

PT-2025-14051 · Unknown · Weblizar About Author

Name of the Vulnerable Software and Affected Versions: weblizar About Author versions 1.6.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to...

7.1CVSS9.6AI score0.00219EPSS
Exploits0References4
Patchstack
Patchstack
added 2025/03/27 12:8 p.m.2 views

WordPress About Author plugin <= 1.6.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin About Author versions = 1.6.2...

7.1CVSS6.1AI score0.00219EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/26 3:29 p.m.7 views

CVE-2025-27323

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jon Bishop WP About Author wp-about-author allows DOM-Based XSS.This issue affects WP About Author: from n/a through = 1.5...

6.5CVSS7.2AI score0.00187EPSS
Exploits0References1
NVD
NVD
added 2025/02/24 3:15 p.m.2 views

CVE-2025-27323

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jon Bishop WP About Author wp-about-author allows DOM-Based XSS.This issue affects WP About Author: from n/a through = 1.5...

6.5CVSS0.00187EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/02/24 3:13 p.m.2 views

WordPress WP About Author plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin WP About Author versions = 1.5...

6.5CVSS6.1AI score0.00187EPSS
Exploits0Affected Software1
CVE
CVE
added 2025/02/24 2:49 p.m.45 views

CVE-2025-27323

CVE-2025-27323 affects the WordPress plugin WP About Author. The vulnerability is described as a Cross-Site Scripting (DOM-Based XSS) flaw caused by improper input neutralization during web page generation. Affected version range is WP About Author from n/a through 1.5, with the CVSSv3.1 base sco...

6.5CVSS7.2AI score0.00187EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/02/24 2:49 p.m.13 views

CVE-2025-27323 WordPress WP About Author plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jon Bishop WP About Author wp-about-author allows DOM-Based XSS.This issue affects WP About Author: from n/a through = 1.5...

6.5CVSS0.00187EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/02/24 2:49 p.m.6 views

CVE-2025-27323 WordPress WP About Author plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jon Bishop WP About Author wp-about-author allows DOM-Based XSS.This issue affects WP About Author: from n/a through = 1.5...

6.5CVSS8.6AI score0.00187EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/24 12:0 a.m.1 views

WordPress plugin WP About Author 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.7AI score0.00187EPSS
Exploits0References2
Kitploit
Kitploit
added 2022/04/07 9:30 p.m.36 views

Octosuite - Advanced Github OSINT Framework

Simply gatherOSINT on Github users and organizations like a god  FEATURES Fetches organization info Fetches user info Fetches repository info Returns contents of a path from a repository Returns a list of repos owned by an organization Returns a list of repos owned by a user Returns a list of...

7.2AI score
Exploits0References1
OSV
OSV
added 2021/11/29 9:15 a.m.0 views

CVE-2021-24745

The About Author Box WordPress plugin before 1.0.2 does not sanitise and escape the Social Profiles field values before outputting them in attributes, which could allow user with a role as low as contributor to perform Cross-Site Scripting attacks...

5.4CVSS5.8AI score
Exploits0References1
CVE
CVE
added 2021/11/29 8:25 a.m.41 views

CVE-2021-24745

CVE-2021-24745 affects the WordPress plugin About Author Box (versions before 1.0.2). The root cause is failure to sanitize and escape values in the Social Profiles field before rendering in attributes, enabling a stored cross-site scripting (XSS) flaw. The issue permits a user with a low-privile...

5.4CVSS5.3AI score0.00197EPSS
Exploits2References1Affected Software1
Rows per page
Query Builder