Lucene search
+L

408 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 4:10 a.m.10 views

CVE-2024-54219

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in thehp AIO Contact aio-contact.This issue affects AIO Contact: from n/a through = 2.8.1...

7.1CVSS7.2AI score0.00354EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/03 3:15 p.m.8 views

CVE-2025-24620

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hkharpreetkumar1 AIO Shortcodes aio-shortcodes allows Stored XSS.This issue affects AIO Shortcodes: from n/a through = 1.3...

7.1CVSS0.00328EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/03 2:22 p.m.7 views

CVE-2025-24620 WordPress AIO Shortcodes plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hkharpreetkumar1 AIO Shortcodes aio-shortcodes allows Stored XSS.This issue affects AIO Shortcodes: from n/a through = 1.3...

7.1CVSS7.2AI score0.00328EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/02/03 12:00 a.m.9 views

PT-2025-5450 · Unknown · Notfound Aio Shortcodes

Name of the Vulnerable Software and Affected Versions: NotFound AIO Shortcodes versions 1.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into the...

7.1CVSS8.8AI score0.00328EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/02/03 12:00 a.m.6 views

WordPress plugin AIO Shortcodes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

7.1CVSS7.7AI score0.00328EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/12/30 5:20 p.m.5 views

WordPress AIO Shortcodes plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by Mika in WordPress Plugin AIO Shortcodes versions = 1.3...

7.1CVSS5.8AI score0.00328EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2024/12/09 2:15 p.m.33 views

CVE-2024-54218

Missing Authorization vulnerability in thehp AIO Contact aio-contact.This issue affects AIO Contact: from n/a through = 2.8.1...

6.5CVSS0.00304EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/09 1:15 p.m.34 views

CVE-2024-54219

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in thehp AIO Contact aio-contact.This issue affects AIO Contact: from n/a through = 2.8.1...

7.1CVSS0.00354EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/09 1:15 p.m.11 views

CVE-2024-54218 WordPress AIO Contact plugin <= 2.8.1 - Unauthenticated Plugin Settings Change vulnerability

Missing Authorization vulnerability in Thehp AIO Contact.This issue affects AIO Contact: from n/a through 2.8.1...

6.5CVSS7AI score0.00304EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/09 1:15 p.m.72 views

CVE-2024-54218

CVE-2024-54218 : WordPress AIO Contact plugin

6.5CVSS7.2AI score0.00304EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/09 12:51 p.m.66 views

CVE-2024-54219

CVE-2024-54219 concerns WordPress plugin Thehp AIO Contact (affected: versions up to 2.8.1). The vulnerability is an Unauthenticated Stored Cross-Site Scripting (XSS) arising from improper input neutralization during web page generation. Public sources confirm the flaw in AIO Contact 2.8.1 and ea...

7.1CVSS7.2AI score0.00354EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/09 12:51 p.m.41 views

CVE-2024-54219 WordPress AIO Contact plugin <= 2.8.1 - Unauthenticated Site-Wide Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in thehp AIO Contact aio-contact.This issue affects AIO Contact: from n/a through = 2.8.1...

7.1CVSS0.00354EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/09 12:51 p.m.11 views

CVE-2024-54219 WordPress AIO Contact plugin <= 2.8.1 - Unauthenticated Site-Wide Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in thehp AIO Contact aio-contact.This issue affects AIO Contact: from n/a through = 2.8.1...

7.1CVSS8.6AI score0.00354EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/09 12:00 a.m.12 views

PT-2024-36097 · Thehp · Thehp Aio Contact

Name of the Vulnerable Software and Affected Versions: Thehp AIO Contact versions prior to 2.8.1 Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting. Recommendations: For versions prior to 2.8.1, update to a...

7.1CVSS6.8AI score0.00354EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/12/09 12:00 a.m.13 views

WordPress plugin AIO Contact 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.7AI score0.00354EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/09 12:00 a.m.10 views

PT-2024-36096 · Unknown · Aio Contact

Name of the Vulnerable Software and Affected Versions: AIO Contact versions prior to 2.8.1 Description: The issue is related to a Missing Authorization vulnerability. Recommendations: For versions prior to 2.8.1, update to a version that contains a fix for this issue. At the moment, there is no...

6.5CVSS6.8AI score0.00304EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/12/09 12:00 a.m.7 views

WordPress plugin AIO Contact 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

6.5CVSS8.3AI score0.00304EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/12/02 3:37 p.m.12 views

WordPress AIO Contact plugin <= 2.8.1 - Unauthenticated Site-Wide Cross Site Scripting (XSS) vulnerability

Unauthenticated Site-Wide Cross Site Scripting XSS vulnerability discovered by Dave Jong Patchstack in WordPress Plugin AIO Contact versions = 2.8.1...

7.1CVSS6.1AI score0.00354EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/12/02 3:35 p.m.9 views

WordPress AIO Contact plugin <= 2.8.1 - Unauthenticated Plugin Settings Change vulnerability

Unauthenticated Plugin Settings Change vulnerability discovered by Dave Jong Patchstack in WordPress Plugin AIO Contact versions = 2.8.1...

6.5CVSS7AI score0.00304EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/18 12:00 a.m.15 views

Vulnerabilities of Linux operating system kernel components related to fs/aio, which allow attackers to cause service failures

The vulnerability of Linux operating system’s fs/aio kernel components is related to the double allocation of memory slots in the functions aiosetupring and kiocbset CancelFn. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00247EPSS
SaveExploits0References38Affected Software6
Rows per page
Query Builder