Lucene search
+L

116 matches found

CNNVD
CNNVD
added 2025/01/16 12:00 a.m.9 views

WordPress plugin amr personalise 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

7.1CVSS8.2AI score0.00204EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/16 12:00 a.m.9 views

PT-2025-5165 · Unknown · Amr Personalise

Name of the Vulnerable Software and Affected Versions: amr personalise versions n/a through 2.10 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross Site Request Forgery. Recommendations: For versions n/a through 2.10, update to a version that includes a fi...

7.1CVSS9.5AI score0.00204EPSS
SaveExploits0References3
NVD
NVD
added 2024/12/02 2:15 p.m.16 views

CVE-2024-52464

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in anmari amr shortcodes amr-shortcodes allows Reflected XSS.This issue affects amr shortcodes: from n/a through = 1.7...

7.1CVSS0.00339EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/02 1:49 p.m.14 views

CVE-2024-52464 WordPress amr shortcodes plugin <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in anmari amr shortcodes amr-shortcodes allows Reflected XSS.This issue affects amr shortcodes: from n/a through = 1.7...

7.1CVSS8.6AI score0.00339EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/02 1:49 p.m.28 views

CVE-2024-52464 WordPress amr shortcodes plugin <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in anmari amr shortcodes amr-shortcodes allows Reflected XSS.This issue affects amr shortcodes: from n/a through = 1.7...

7.1CVSS0.00339EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/02 1:49 p.m.66 views

CVE-2024-52464

CVE-2024-52464: Reflected XSS in WordPress plugin amr shortcodes (versions 1.7 and earlier). Root cause is improper input handling during web page generation, enabling an attacker-controlled input to be reflected in the output. Affected component: amr shortcodes. Impact: Reflected XSS risk on pag...

7.1CVSS7.2AI score0.00339EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/02 12:00 a.m.8 views

WordPress plugin amr shortcodes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.6AI score0.00339EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/02 12:00 a.m.9 views

PT-2024-35304 · Unknown · Anmari Amr Shortcodes

Name of the Vulnerable Software and Affected Versions: anmari amr shortcodes versions 1.7 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This enables attackers to injec...

7.1CVSS9.1AI score0.00339EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/11/18 10:20 a.m.10 views

WordPress amr shortcodes plugin <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin amr shortcodes versions = 1.7...

7.1CVSS6.1AI score0.00339EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/11/18 12:00 a.m.19 views

WordPress amr shortcodes Plugin <= 1.7 is vulnerable to Cross Site Scripting (XSS)

Software amr shortcodes Type Plugin Vulnerable versions = 1.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52464 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f797c3bcc9b6 Credits Le Ngoc Anh Required privilege...

6.8AI score0.00339EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2024/11/07 9:15 p.m.17 views

CVE-2019-20469

An issue was discovered on One2Track 2019-12-08 devices. Confidential information is needlessly stored on the smartwatch. Audio files are stored in .amr format, in the audior directory. An attacker who has physical access can retrieve all audio files by connecting via a USB cable...

4.6CVSS0.00323EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/11/07 12:00 a.m.31 views

CVE-2019-20469

An issue was discovered on One2Track 2019-12-08 devices. Confidential information is needlessly stored on the smartwatch. Audio files are stored in .amr format, in the audior directory. An attacker who has physical access can retrieve all audio files by connecting via a USB cable...

0.00323EPSS
SaveExploits0References2
CVE
CVE
added 2024/11/07 12:00 a.m.58 views

CVE-2019-20469

CVE-2019-20469 affects One2Track 2019-12-08 devices. The issue involves confidential data stored on the smartwatch, specifically audio files stored in .amr format under the audior directory. An attacker with physical access can retrieve all audio files by connecting the device via USB. Impact is ...

4.6CVSS6.2AI score0.00323EPSS
SaveExploits0References3
NVD
NVD
added 2023/11/07 5:15 p.m.34 views

CVE-2022-45348

Improper Neutralization of Formula Elements in a CSV File vulnerability in anmari amr users.This issue affects amr users: from n/a through 4.59.4...

8.8CVSS0.00785EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/07 5:15 p.m.6 views

CVE-2022-45348

Improper Neutralization of Formula Elements in a CSV File vulnerability in anmari amr users.This issue affects amr users: from n/a through 4.59.4...

8.8CVSS5.8AI score0.00785EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/07 5:15 p.m.26 views

Input validation

Improper Neutralization of Formula Elements in a CSV File vulnerability in anmari amr users.This issue affects amr users: from n/a through 4.59.4...

6.5CVSS7.1AI score0.00785EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/07 4:52 p.m.24 views

CVE-2022-45348 WordPress amr users plugin <= 4.59.4 - CSV Injection vulnerability

A vulnerability in anmari amr users amr-users.This issue affects amr users: from n/a through = 4.59.4...

5.8CVSS8.5AI score0.00785EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/11/07 4:52 p.m.39 views

CVE-2022-45348 WordPress amr users Plugin <= 4.59.4 is vulnerable to CSV Injection

Improper Neutralization of Formula Elements in a CSV File vulnerability in anmari amr users.This issue affects amr users: from n/a through 4.59.4...

5.8CVSS8.9AI score0.00785EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/07 4:52 p.m.52 views

CVE-2022-45348

CVE-2022-45348 refers to a vulnerability in the WordPress plugin amr users (versions

8.8CVSS8.5AI score0.00785EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/07 12:00 a.m.9 views

PT-2023-14643 · Amr · Amr

Name of the Vulnerable Software and Affected Versions: amr users versions 4.59.4 and earlier Description: The issue is related to the improper neutralization of formula elements in a CSV file, affecting amr users. Recommendations: For versions 4.59.4 and earlier, update to a version that contains...

8.8CVSS8.8AI score0.00785EPSS
SaveExploits0References3
Rows per page
Query Builder