Lucene search
+L

1676 matches found

NVD
NVD
•added 2025/03/13 6:15 a.m.•15 views

CVE-2024-13884

The Limit Bio WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS0.00268EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/13 6:15 a.m.•30 views

CVE-2024-13891

The Schedule WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS0.00268EPSS
SaveExploits1References1
OSV
OSV
•added 2025/03/13 6:15 a.m.•18 views

CVE-2024-13884

The Limit Bio WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS5.8AI score0.00268EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/13 12:00 a.m.•20 views

PT-2025-11154 · WordPress · Wp Click Info

Name of the Vulnerable Software and Affected Versions: WP Click Info WordPress plugin versions 2.7.4 and earlier Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the WP Click Info WordPress plugin does not properly sanitise and escape a parameter...

7.1CVSS8.4AI score0.00268EPSS
SaveExploits1References6
OSV
OSV
•added 2025/03/11 6:15 a.m.•14 views

CVE-2024-13836

The WP Login Control WordPress plugin through 2.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS7.3AI score0.00268EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/11 6:15 a.m.•22 views

CVE-2024-13862

The S3Bubble Media Streaming AWS|Elementor|YouTube|Vimeo Functionality WordPress plugin through 8.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS0.00268EPSS
SaveExploits1References1
CVE
CVE
•added 2025/03/11 6:00 a.m.•65 views

CVE-2024-13864

The Countdown Timer WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1AI score0.00319EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/03/11 6:00 a.m.•14 views

CVE-2024-13864 Countdown Timer <= 1.0 - Reflected XSS

The Countdown Timer WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

5.8AI score0.00319EPSS
SaveExploits1References1
CVE
CVE
•added 2025/03/11 6:00 a.m.•89 views

CVE-2024-13853

The SEO Tools WordPress plugin (versions through 4.0.7 ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitize and escape the 'src' parameter within the rssread.php file before outputting it back to the page. This allows unauthenticated attacke...

6.2AI score0.00611EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/03/11 6:00 a.m.•9 views

CVE-2024-13615 Social Media Plugin by Social Snap <= 1.3.6 - Admin+ Stored XSS

The Social Share Buttons, Social Sharing Icons, Click to Tweet — Social Media Plugin by Social Snap WordPress plugin through 1.3.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the...

3.4AI score0.00261EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/03/09 6:00 a.m.•12 views

CVE-2025-1363 easy-broken-link-checker <= 9.0.2 - Admin+ Stored XSS

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is...

4.2AI score0.00314EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/03/08 6:00 a.m.•40 views

CVE-2024-13825 Email Keep <= 1.1 - Reflected XSS

The Email Keep WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

0.00295EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/03/07 2:34 a.m.•16 views

CVE-2025-27647

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Addition of Partial Admin Users Without Authentication V-2024-002...

9.8CVSS7.2AI score0.01023EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/06 6:15 a.m.•16 views

CVE-2024-13868

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS0.00317EPSS
SaveExploits1References1
CVE
CVE
•added 2025/03/06 6:00 a.m.•66 views

CVE-2024-13868

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.2AI score0.00317EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2025/03/06 12:00 a.m.•11 views

RSUPPORT RemoteView Agent 安全漏洞

RSUPPORT RemoteView Agent is a remote control agent program from RSUPPORT Japan. A security vulnerability exists in RSUPPORT RemoteView Agent versions prior to v8.1.5.2, which stems from incorrect access privileges to specific services, and could cause a non-administrative user to execute arbitra...

7.8CVSS7.9AI score0.00149EPSS
SaveExploits0References3
NVD
NVD
•added 2025/03/05 6:15 a.m.•18 views

CVE-2025-27647

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Addition of Partial Admin Users Without Authentication V-2024-002...

9.8CVSS0.01023EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2025/03/05 12:00 a.m.•10 views

CVE-2025-27647

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Addition of Partial Admin Users Without Authentication V-2024-002...

7.2AI score0.01023EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/03/05 12:00 a.m.•29 views

CVE-2025-27647

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Addition of Partial Admin Users Without Authentication V-2024-002...

0.01023EPSS
SaveExploits1References2
OSV
OSV
•added 2025/03/03 7:47 p.m.•18 views

GHSA-5PXH-89CX-4668 Magento LTS vulnerable to stored XSS in theme config fields

As reported by Aakash Adhikari, Github: @justlife4x4, the Design Themes Skin Images / CSS config field allows a Stored XSS when it contains an end script tag. Impact A malicious user with access to this configuration field could use a Stored XSS to affect other authenticated admin users in the...

2.9CVSS3.3AI score0.00256EPSS
SaveExploits0References6
Rows per page
Query Builder