Lucene search
+L

45 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2010-1563

Malware in sbrugna...

2.1CVSS6.4AI score0.00864EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2015-9279

Malware in sbrugna...

4.8CVSS5.2AI score0.00981EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2024-45102

Malicious code in bioql PyPI...

6.5CVSS6.4AI score0.00346EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 6:40 a.m.•17 views

CVE-2024-50540

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in demixpress dp AddThis dp-addthis allows Stored XSS.This issue affects dp AddThis: from n/a through = 1.0.2...

6.5CVSS5.9AI score0.00346EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:33 a.m.•20 views

CVE-2015-9439

The addthis plugin before 5.0.13 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=addthissocialwidget pubid parameter...

4.8CVSS6.1AI score0.00981EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 1:27 a.m.•18 views

CVE-2010-1536

Cross-site scripting XSS vulnerability in the AddThis Button module 5.x before 5.x-2.2 and 6.x before 6.x-2.9 for Drupal allows remote authenticated users, with administer addthis privileges, to inject arbitrary web script or HTML via unspecified vectors...

2.1CVSS5.6AI score0.00864EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/19 5:15 p.m.•24 views

CVE-2024-50540

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in demixpress dp AddThis dp-addthis allows Stored XSS.This issue affects dp AddThis: from n/a through = 1.0.2...

6.5CVSS0.00346EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/19 4:32 p.m.•78 views

CVE-2024-50540

CVE-2024-50540 is a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin (dp) AddThis, affecting versions 1.0.0 through 1.0.2. The issue arises from improper neutralization of input during web page generation, enabling stored XSS. Public sources in the connected documents confi...

6.5CVSS5.9AI score0.00346EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/19 4:32 p.m.•37 views

CVE-2024-50540 WordPress (dp) AddThis plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in demixpress dp AddThis dp-addthis allows Stored XSS.This issue affects dp AddThis: from n/a through = 1.0.2...

6.5CVSS0.00346EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/19 4:32 p.m.•20 views

CVE-2024-50540 WordPress (dp) AddThis plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in demixpress dp AddThis dp-addthis allows Stored XSS.This issue affects dp AddThis: from n/a through = 1.0.2...

6.5CVSS5.9AI score0.00346EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/19 12:00 a.m.•14 views

WordPress plugin AddThis 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6AI score0.00346EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/19 12:00 a.m.•16 views

PT-2024-34318 · Demixpress · Addthis

Name of the Vulnerable Software and Affected Versions: DemixPress dp AddThis versions 1.0.0 through 1.0.2 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject...

6.5CVSS6.1AI score0.00346EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•2 views

CVE-2024-50540: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in demixpress dp AddThis dp-addthis allows Stored XSS.This issue affects dp AddThis: from n/a through = 1.0.2...

6.5CVSS5.8AI score0.00346EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/10/31 10:21 a.m.•16 views

WordPress (dp) AddThis plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin dp AddThis versions = 1.0.2...

6.5CVSS5.8AI score0.00346EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/10/31 12:00 a.m.•23 views

WordPress (dp) AddThis Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)

Software dp AddThis Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50540 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6745e3b01a1e Credits SOPROBRO Required privilege Contributor...

6.5CVSS6.5AI score0.00346EPSS
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/12 9:51 a.m.•13 views

Malicious code in addthis-wordpress-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6d8ae72ce3501b8463193222bf9bebe2913ee52bf39fb10c8c9aa2f2049ebaa5 The OpenSSF Package Analysis project identified 'addthis-wordpress-plugin' @ 2.0.0 npm as malicious. It is considered malicious because: - The...

7.1AI score
SaveExploits0
OSV
OSV
•added 2024/06/12 9:51 a.m.•26 views

MAL-2024-1586 Malicious code in addthis-wordpress-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6d8ae72ce3501b8463193222bf9bebe2913ee52bf39fb10c8c9aa2f2049ebaa5 The OpenSSF Package Analysis project identified 'addthis-wordpress-plugin' @ 2.0.0 npm as malicious. It is considered malicious because: - The...

7.3AI score
SaveExploits0
CNVD
CNVD
•added 2019/10/11 12:00 a.m.•17 views

WordPress addthis plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. addthis is a social sharing button plugin used in it. A cross-site scripting vulnerability exists in WordPress addthis plugin versions...

4.8CVSS6.2AI score0.00981EPSS
SaveExploits0References1
NVD
NVD
•added 2019/09/26 3:15 a.m.•25 views

CVE-2015-9439

The addthis plugin before 5.0.13 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=addthissocialwidget pubid parameter...

4.8CVSS5.1AI score0.00981EPSS
SaveExploits0References3
Prion
Prion
•added 2019/09/26 3:15 a.m.•23 views

Cross site request forgery (csrf)

The addthis plugin before 5.0.13 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=addthissocialwidget pubid parameter...

3.5CVSS6.2AI score0.00981EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder