Lucene search
+L

28 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2015-7233

Malware in sbrugna...

2.6CVSS5.8AI score0.00913EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2025-7838

Malicious code in bioql PyPI...

6.5CVSS7.9AI score0.00273EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 5:02 a.m.•18 views

CVE-2015-7304

Cross-site scripting XSS vulnerability in the amoCRM module 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP POST data...

2.6CVSS6AI score0.00913EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/14 3:44 p.m.•26 views

CVE-2025-28870

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in amocrm amoCRM WebForm amocrm-webform allows DOM-Based XSS.This issue affects amoCRM WebForm: from n/a through = 1.1...

6.5CVSS7.2AI score0.00273EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/03/14 12:00 a.m.•61 views

WordPress amoCRM WebForm plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress plugin amoCR...

6.5CVSS6.2AI score0.00273EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/03/11 9:41 p.m.•15 views

WordPress amoCRM WebForm plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin amoCRM WebForm versions = 1.1...

6.5CVSS7.7AI score0.00273EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/03/11 9:15 p.m.•48 views

CVE-2025-28870

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in amocrm amoCRM WebForm amocrm-webform allows DOM-Based XSS.This issue affects amoCRM WebForm: from n/a through = 1.1...

6.5CVSS0.00273EPSS
SaveExploits0References1
OSV
OSV
•added 2025/03/11 9:15 p.m.•35 views

CVE-2025-28870

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in amocrm amoCRM WebForm allows DOM-Based XSS. This issue affects amoCRM WebForm: from n/a through 1.1...

5.4CVSS5.8AI score0.00273EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/11 9:00 p.m.•13 views

CVE-2025-28870 WordPress amoCRM WebForm plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in amocrm amoCRM WebForm amocrm-webform allows DOM-Based XSS.This issue affects amoCRM WebForm: from n/a through = 1.1...

6.5CVSS8.6AI score0.00273EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/11 9:00 p.m.•53 views

CVE-2025-28870 WordPress amoCRM WebForm plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in amocrm amoCRM WebForm amocrm-webform allows DOM-Based XSS.This issue affects amoCRM WebForm: from n/a through = 1.1...

6.5CVSS0.00273EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/11 9:00 p.m.•97 views

CVE-2025-28870

CVE-2025-28870 is a DOM-based Cross-Site Scripting vulnerability in the WordPress plugin amoCRM WebForm. Affected: amoCRM WebForm ≤ 1.1. Root cause: improper neutralization during web page generation leading to XSS. Access requirement: authenticated (Contributor+) user can trigger the stored XSS....

6.5CVSS7.2AI score0.00273EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/03/11 12:00 a.m.•7 views

PT-2025-10919

Name of the Vulnerable Software and Affected Versions: amoCRM WebForm versions n/a through 1.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based Cross-site Scripting XSS. This means that an attacker could potentially injec...

6.5CVSS0.00273EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/03/11 12:00 a.m.•16 views

WordPress plugin amoCRM WebForm 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress plugin amoCR...

6.5CVSS6AI score0.00273EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/11 12:00 a.m.•9 views

CVE-2025-28870: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in amocrm amoCRM WebForm amocrm-webform allows DOM-Based XSS.This issue affects amoCRM WebForm: from n/a through = 1.1...

6.5CVSS5.8AI score0.00273EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/01/30 12:00 a.m.•17 views

amoCRM Cloud XSS

The vulnerability of the amoCRM customer relationship management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

8.5CVSS5.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/10/15 12:00 a.m.•5 views

PT-2024-10380

Name of the Vulnerable Software and Affected Versions amoCRM affected versions not specified Description The issue is related to the lack of protection of the web page structure in amoCRM, a cloud-based customer relationship management system. This could allow a remote attacker to conduct...

8.5CVSS5.8AI score
SaveExploits0References1
Openbugbounty
Openbugbounty
•added 2018/04/26 10:14 p.m.•13 views

amocrm.ru XSS vulnerability

Open Bug Bounty ID: OBB-609088 Description| Value ---|--- Affected Website:| amocrm.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
Openbugbounty
Openbugbounty
•added 2017/12/10 10:09 p.m.•22 views

amocrm.com XSS vulnerability

Open Bug Bounty ID: OBB-451526 Description| Value ---|--- Affected Website:| amocrm.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

6.4AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2017/10/11 3:50 p.m.•25 views

amocrm.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-332514 Description| Value ---|--- Affected Website:| amocrm.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

6.7AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2016/11/15 7:28 a.m.•22 views

amocrm.ru Open Redirect vulnerability

Vulnerable URL: http://www.amocrm.ru/bitrix/rk.php?goto=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 23798 VIP website status:| Yes Check...

6.9AI score
SaveExploits0
Rows per page
Query Builder