Lucene search
+L

49 matches found

cnnvd
cnnvd
added 2024/12/09 12:0 a.m.5 views

WordPress plugin Apollo13 Framework Extensions 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS8.8AI score0.00563EPSS
Exploits0References1
osv
osv
added 2024/07/21 10:15 p.m.4 views

CVE-2024-37480

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Apollo13Themes Apollo13 Framework Extensions apollo13-framework-extensions allows Stored XSS.This issue affects Apollo13 Framework Extensions: from n/a through 1.9.3...

5.4CVSS5.8AI score0.00313EPSS
Exploits0References1
vulnrichment
vulnrichment
added 2024/07/21 9:21 p.m.20 views

CVE-2024-37480 WordPress Apollo13 Framework Extensions plugin <= 1.9.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Apollo13Themes Apollo13 Framework Extensions apollo13-framework-extensions allows Stored XSS.This issue affects Apollo13 Framework Extensions: from n/a through 1.9.3...

6.5CVSS6.8AI score0.00313EPSS
Exploits0References1
cve
cve
added 2024/07/21 9:21 p.m.49 views

CVE-2024-37480

CVE-2024-37480 (Apollo13 Framework Extensions) is a Stored XSS vulnerability in the Apollo13 Framework Extensions WordPress plugin. The issue arises from improper neutralization of input during web page generation, enabling stored script execution. Affected: Apollo13 Framework Extensions versions...

6.5CVSS6.4AI score0.00313EPSS
Exploits0References1Affected Software1
cvelist
cvelist
added 2024/07/21 9:21 p.m.92 views

CVE-2024-37480 WordPress Apollo13 Framework Extensions plugin <= 1.9.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Apollo13Themes Apollo13 Framework Extensions apollo13-framework-extensions allows Stored XSS.This issue affects Apollo13 Framework Extensions: from n/a through 1.9.3...

6.5CVSS0.00313EPSS
Exploits0References1
ptsecurity
ptsecurity
added 2024/07/21 12:0 a.m.13 views

PT-2024-27589 · Unknown · Apollo13 Framework Extensions

Name of the Vulnerable Software and Affected Versions: Apollo13 Framework Extensions versions 1.9.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...

6.5CVSS5.8AI score0.00313EPSS
Exploits0References6
patchstack
patchstack
added 2024/07/04 9:0 a.m.4 views

WordPress Apollo13 Framework Extensions plugin <= 1.9.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Michael Patchstack Alliance in WordPress Plugin Apollo13 Framework Extensions versions = 1.9.3...

6.5CVSS6.1AI score0.00313EPSS
Exploits0Affected Software1
patchstack
patchstack
added 2024/07/04 12:0 a.m.12 views

WordPress Apollo13 Framework Extensions Plugin <= 1.9.3 is vulnerable to Cross Site Scripting (XSS)

Software Apollo13 Framework Extensions Type Plugin Vulnerable versions = 1.9.3 Fixed in 1.9.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37480 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID dbb97a0dbb53 Credits Michael Required privile...

6.5CVSS6.6AI score0.00313EPSS
Exploits0References2Affected Software1
osv
osv
added 2024/02/08 12:15 p.m.6 views

CVE-2024-24880

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apollo13Themes Apollo13 Framework Extensions allows Stored XSS.This issue affects Apollo13 Framework Extensions: from n/a through 1.9.2...

5.4CVSS7.3AI score0.00317EPSS
Exploits0References1
cve
cve
added 2024/02/08 11:58 a.m.51 views

CVE-2024-24880

CVE-2024-24880 affects the Apollo13 Framework Extensions WordPress plugin (versions

6.5CVSS7.1AI score0.00317EPSS
Exploits0References1Affected Software1
vulnrichment
vulnrichment
added 2024/02/08 11:58 a.m.22 views

CVE-2024-24880 WordPress Apollo13 Framework Extensions Plugin <= 1.9.2 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apollo13Themes Apollo13 Framework Extensions allows Stored XSS.This issue affects Apollo13 Framework Extensions: from n/a through 1.9.2...

6.5CVSS6.7AI score0.00317EPSS
Exploits0References1
ptsecurity
ptsecurity
added 2024/02/08 12:0 a.m.11 views

PT-2024-20636 · Unknown · Apollo13 Framework Extensions

Name of the Vulnerable Software and Affected Versions: Apollo13 Framework Extensions versions 1.9.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacke...

6.5CVSS9.1AI score0.00317EPSS
Exploits0References5
cnnvd
cnnvd
added 2024/02/08 12:0 a.m.14 views

WordPress Plugin Apollo13 Framework Extensions Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

6.5CVSS6AI score0.00317EPSS
Exploits0References2
patchstack
patchstack
added 2024/02/05 12:0 a.m.11 views

WordPress Apollo13 Framework Extensions Plugin <= 1.9.2 is vulnerable to Cross Site Scripting (XSS)

Software Apollo13 Framework Extensions Type Plugin Vulnerable versions = 1.9.2 Fixed in 1.9.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-24880 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c7023587281d Credits LVT-tholv2k Required...

6.5CVSS6.5AI score0.00317EPSS
Exploits0References2Affected Software1
nvd
nvd
added 2024/01/05 10:15 a.m.20 views

CVE-2023-51539

Cross-Site Request Forgery CSRF vulnerability in Apollo13Themes Apollo13 Framework Extensions.This issue affects Apollo13 Framework Extensions: from n/a through 1.9.1...

8.8CVSS5.7AI score0.00216EPSS
Exploits0References1
osv
osv
added 2024/01/05 10:15 a.m.5 views

CVE-2023-51539

Cross-Site Request Forgery CSRF vulnerability in Apollo13Themes Apollo13 Framework Extensions.This issue affects Apollo13 Framework Extensions: from n/a through 1.9.1...

8.8CVSS7.3AI score0.00216EPSS
Exploits0References1
vulnrichment
vulnrichment
added 2024/01/05 9:44 a.m.3 views

CVE-2023-51539 WordPress Apollo13 Framework Extensions Plugin <= 1.9.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Apollo13Themes Apollo13 Framework Extensions.This issue affects Apollo13 Framework Extensions: from n/a through 1.9.1...

4.3CVSS6.3AI score0.00216EPSS
Exploits0References1
cvelist
cvelist
added 2024/01/05 9:44 a.m.24 views

CVE-2023-51539 WordPress Apollo13 Framework Extensions Plugin <= 1.9.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Apollo13Themes Apollo13 Framework Extensions.This issue affects Apollo13 Framework Extensions: from n/a through 1.9.1...

5.4CVSS8.9AI score0.00216EPSS
Exploits0References1
cve
cve
added 2024/01/05 9:44 a.m.54 views

CVE-2023-51539

Technical details for CVE-2023-51539 are not provided in the supplied documents; no affected products, root cause, or remediation are disclosed here. Monitor for updates from vendors/security advisories.

8.8CVSS8.5AI score0.00216EPSS
Exploits0References1Affected Software1
cnnvd
cnnvd
added 2024/01/05 12:0 a.m.5 views

WordPress Plugin Apollo13 Framework Extensions Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS6.5AI score0.00216EPSS
Exploits0References2
Rows per page
Query Builder