Lucene search
K

23 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2015-7233

Malware in sbrugna...

2.6CVSS6.4AI score0.00913EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2025-7838

Malicious code in bioql PyPI...

6.5CVSS7.3AI score0.00246EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:2 a.m.7 views

CVE-2015-7304

Cross-site scripting XSS vulnerability in the amoCRM module 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP POST data...

2.6CVSS6AI score0.00913EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/14 3:44 p.m.14 views

CVE-2025-28870

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in amocrm amoCRM WebForm amocrm-webform allows DOM-Based XSS.This issue affects amoCRM WebForm: from n/a through = 1.1...

6.5CVSS7.2AI score0.00246EPSS
Exploits0References1
CNVD
CNVD
added 2025/03/14 12:0 a.m.7 views

WordPress amoCRM WebForm plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress plugin amoCR...

6.5CVSS6.2AI score0.00246EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/03/11 9:41 p.m.3 views

WordPress amoCRM WebForm plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin amoCRM WebForm versions = 1.1...

6.5CVSS7.7AI score0.00246EPSS
Exploits0Affected Software1
OSV
OSV
added 2025/03/11 9:15 p.m.8 views

CVE-2025-28870

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in amocrm amoCRM WebForm allows DOM-Based XSS. This issue affects amoCRM WebForm: from n/a through 1.1...

5.4CVSS5.8AI score0.00246EPSS
Exploits0References1
NVD
NVD
added 2025/03/11 9:15 p.m.25 views

CVE-2025-28870

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in amocrm amoCRM WebForm amocrm-webform allows DOM-Based XSS.This issue affects amoCRM WebForm: from n/a through = 1.1...

6.5CVSS0.00246EPSS
Exploits0References1
CVE
CVE
added 2025/03/11 9:0 p.m.64 views

CVE-2025-28870

CVE-2025-28870 is a DOM-based Cross-Site Scripting vulnerability in the WordPress plugin amoCRM WebForm. Affected: amoCRM WebForm ≤ 1.1. Root cause: improper neutralization during web page generation leading to XSS. Access requirement: authenticated (Contributor+) user can trigger the stored XSS....

6.5CVSS7.2AI score0.00246EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/11 9:0 p.m.10 views

CVE-2025-28870 WordPress amoCRM WebForm plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in amocrm amoCRM WebForm amocrm-webform allows DOM-Based XSS.This issue affects amoCRM WebForm: from n/a through = 1.1...

6.5CVSS8.6AI score0.00246EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/11 9:0 p.m.29 views

CVE-2025-28870 WordPress amoCRM WebForm plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in amocrm amoCRM WebForm amocrm-webform allows DOM-Based XSS.This issue affects amoCRM WebForm: from n/a through = 1.1...

6.5CVSS0.00246EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/03/11 12:0 a.m.3 views

WordPress plugin amoCRM WebForm 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress plugin amoCR...

6.5CVSS6AI score0.00246EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/01/30 12:0 a.m.6 views

The vulnerability of the amoCRM cloud-based customer relationship management system lies in the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the amoCRM customer relationship management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

8.5CVSS5.2AI score
Exploits0
Openbugbounty
Openbugbounty
added 2018/04/26 10:14 p.m.6 views

amocrm.ru XSS vulnerability

Open Bug Bounty ID: OBB-609088 Description| Value ---|--- Affected Website:| amocrm.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Exploits0
Openbugbounty
Openbugbounty
added 2017/12/10 10:9 p.m.15 views

amocrm.com XSS vulnerability

Open Bug Bounty ID: OBB-451526 Description| Value ---|--- Affected Website:| amocrm.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

6.4AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/10/11 3:50 p.m.17 views

amocrm.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-332514 Description| Value ---|--- Affected Website:| amocrm.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

6.7AI score
Exploits0
Openbugbounty
Openbugbounty
added 2016/11/15 7:28 a.m.16 views

amocrm.ru Open Redirect vulnerability

Vulnerable URL: http://www.amocrm.ru/bitrix/rk.php?goto=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 23798 VIP website status:| Yes Check...

6.9AI score
Exploits0
CNVD
CNVD
added 2015/09/25 12:0 a.m.3 views

Drupal amoCRM module cross-site scripting vulnerability

Drupal is a free, open source content management system developed in PHP. amoCRM module for Drupal is a sales management Web service for Drupal. A cross-site scripting vulnerability in Drupal amoCRM module 7.x-1.2 before 7.x-1.x allows remote attackers to inject arbitrary web script or HTML via...

2.6CVSS6AI score0.00913EPSS
Exploits0References1
NVD
NVD
added 2015/09/21 7:59 p.m.12 views

CVE-2015-7304

Cross-site scripting XSS vulnerability in the amoCRM module 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP POST data...

2.6CVSS5.8AI score0.00913EPSS
Exploits0References2
Prion
Prion
added 2015/09/21 7:59 p.m.15 views

Cross site scripting

Cross-site scripting XSS vulnerability in the amoCRM module 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP POST data...

2.6CVSS6.2AI score0.00913EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder