Lucene search
K

22 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2015-7233

Malware in sbrugna...

2.6CVSS6.4AI score0.00263EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-7838

Malicious code in bioql PyPI...

6.5CVSS7.3AI score0.00102EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:2 a.m.5 views

CVE-2015-7304

Cross-site scripting XSS vulnerability in the amoCRM module 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP POST data...

2.6CVSS6AI score0.00263EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/14 3:44 p.m.6 views

CVE-2025-28870

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in amocrm amoCRM WebForm amocrm-webform allows DOM-Based XSS.This issue affects amoCRM WebForm: from n/a through = 1.1...

6.5CVSS7.2AI score0.00102EPSS
Exploits0References1
CNVD
CNVD
added 2025/03/14 12:0 a.m.7 views

WordPress amoCRM WebForm plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress plugin amoCR...

6.5CVSS6.2AI score0.00102EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/03/11 9:41 p.m.1 views

WordPress amoCRM WebForm plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin amoCRM WebForm versions = 1.1...

6.5CVSS7.7AI score0.00102EPSS
Exploits0Affected Software1
NVD
NVD
added 2025/03/11 9:15 p.m.5 views

CVE-2025-28870

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in amocrm amoCRM WebForm amocrm-webform allows DOM-Based XSS.This issue affects amoCRM WebForm: from n/a through = 1.1...

6.5CVSS0.00102EPSS
Exploits0References1
OSV
OSV
added 2025/03/11 9:15 p.m.1 views

CVE-2025-28870

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in amocrm amoCRM WebForm allows DOM-Based XSS. This issue affects amoCRM WebForm: from n/a through 1.1...

5.4CVSS5.8AI score0.00102EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/11 9:0 p.m.8 views

CVE-2025-28870 WordPress amoCRM WebForm plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in amocrm amoCRM WebForm amocrm-webform allows DOM-Based XSS.This issue affects amoCRM WebForm: from n/a through = 1.1...

6.5CVSS8.6AI score0.00102EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/11 9:0 p.m.8 views

CVE-2025-28870 WordPress amoCRM WebForm plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in amocrm amoCRM WebForm amocrm-webform allows DOM-Based XSS.This issue affects amoCRM WebForm: from n/a through = 1.1...

6.5CVSS0.00102EPSS
Exploits0References1
CVE
CVE
added 2025/03/11 9:0 p.m.54 views

CVE-2025-28870

CVE-2025-28870 is a DOM-based Cross-Site Scripting vulnerability in the WordPress plugin amoCRM WebForm. Affected: amoCRM WebForm ≤ 1.1. Root cause: improper neutralization during web page generation leading to XSS. Access requirement: authenticated (Contributor+) user can trigger the stored XSS....

6.5CVSS7.2AI score0.00102EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/03/11 12:0 a.m.1 views

WordPress plugin amoCRM WebForm 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress plugin amoCR...

6.5CVSS6AI score0.00102EPSS
Exploits0References2
Openbugbounty
Openbugbounty
added 2018/04/26 10:14 p.m.5 views

amocrm.ru XSS vulnerability

Open Bug Bounty ID: OBB-609088 Description| Value ---|--- Affected Website:| amocrm.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Exploits0
Openbugbounty
Openbugbounty
added 2017/12/10 10:9 p.m.14 views

amocrm.com XSS vulnerability

Open Bug Bounty ID: OBB-451526 Description| Value ---|--- Affected Website:| amocrm.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

6.4AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/10/11 3:50 p.m.16 views

amocrm.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-332514 Description| Value ---|--- Affected Website:| amocrm.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

6.7AI score
Exploits0
Openbugbounty
Openbugbounty
added 2016/11/15 7:28 a.m.15 views

amocrm.ru Open Redirect vulnerability

Vulnerable URL: http://www.amocrm.ru/bitrix/rk.php?goto=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 23798 VIP website status:| Yes Check...

6.9AI score
Exploits0
CNVD
CNVD
added 2015/09/25 12:0 a.m.3 views

Drupal amoCRM module cross-site scripting vulnerability

Drupal is a free, open source content management system developed in PHP. amoCRM module for Drupal is a sales management Web service for Drupal. A cross-site scripting vulnerability in Drupal amoCRM module 7.x-1.2 before 7.x-1.x allows remote attackers to inject arbitrary web script or HTML via...

2.6CVSS6AI score0.00263EPSS
Exploits0References1
NVD
NVD
added 2015/09/21 7:59 p.m.6 views

CVE-2015-7304

Cross-site scripting XSS vulnerability in the amoCRM module 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP POST data...

2.6CVSS5.8AI score0.00263EPSS
Exploits0References2
Prion
Prion
added 2015/09/21 7:59 p.m.12 views

Cross site scripting

Cross-site scripting XSS vulnerability in the amoCRM module 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP POST data...

2.6CVSS6.2AI score0.00263EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2015/09/21 7:0 p.m.37 views

CVE-2015-7304

CVE-2015-7304 affects the Drupal amoCRM module (7.x-1.x) prior to 7.x-1.2. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP POST data due to improper input handling. Impact is limited to affected amoCRM...

2.6CVSS5.9AI score0.00263EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder