Lucene search
K

143 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 10:45 a.m.9 views

CVE-2022-0161

The ARI Fancy Lightbox WordPress plugin before 1.3.9 does not sanitise and escape the msg parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.5AI score0.0021EPSS
Exploits2References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2006-0363

Malware in sbrugna...

5CVSS6.4AI score0.00886EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-11063

Malware in sbrugna...

5.4CVSS5.6AI score0.00324EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-51930

Malicious code in bioql PyPI...

6.5CVSS6.7AI score0.0017EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-51624

Malicious code in bioql PyPI...

5.4CVSS8.5AI score0.00183EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2023-56855

Malicious code in bioql PyPI...

9.9CVSS9.2AI score0.00357EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-42346

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00193EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-22247

Malicious code in bioql PyPI...

8.8CVSS6.1AI score0.0006EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-26993

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00047EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-56200

Malicious code in bioql PyPI...

8.8CVSS9.1AI score0.00051EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/09/07 2:32 p.m.1 views

CVE-2025-58784

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arisoft ARI Fancy Lightbox ari-fancy-lightbox allows Stored XSS.This issue affects ARI Fancy Lightbox: from n/a through = 1.4.0...

6.5CVSS5.9AI score0.00047EPSS
Exploits0References1
NVD
NVD
added 2025/09/05 2:15 p.m.1 views

CVE-2025-58784

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arisoft ARI Fancy Lightbox ari-fancy-lightbox allows Stored XSS.This issue affects ARI Fancy Lightbox: from n/a through = 1.4.0...

6.5CVSS0.00047EPSS
Exploits0References1
CVE
CVE
added 2025/09/05 1:44 p.m.6 views

CVE-2025-58784

CVE-2025-58784 affects the WordPress plugin ARI Fancy Lightbox. It is a Stored XSS due to improper input neutralization during web page generation, affecting ARI Fancy Lightbox versions through 1.4.0. The issue can store attacker-controlled input that is later reflected in pages. Remediation: upd...

6.5CVSS5.9AI score0.00047EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/05 1:44 p.m.7 views

CVE-2025-58784 WordPress ARI Fancy Lightbox Plugin <= 1.4.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arisoft ARI Fancy Lightbox ari-fancy-lightbox allows Stored XSS.This issue affects ARI Fancy Lightbox: from n/a through = 1.4.0...

6.5CVSS0.00047EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/09/05 1:17 p.m.2 views

WordPress ARI Fancy Lightbox Plugin <= 1.4.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Prissy Patchstack Alliance in WordPress Plugin ARI Fancy Lightbox versions = 1.4.0...

6.5CVSS6AI score0.00047EPSS
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/05 12:0 a.m.1 views

PT-2025-36124

Name of the Vulnerable Software and Affected Versions: ARI Fancy Lightbox versions through 1.4.0 Description: The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, specifically a Stored Cross-site Scripting XSS issue. This allows for the injection of...

6.5CVSS5.5AI score0.00047EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/09/05 12:0 a.m.1 views

WordPress plugin ARI Fancy Lightbox 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.8AI score0.00047EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:37 a.m.4 views

CVE-2024-24884

Cross-Site Request Forgery CSRF vulnerability in ARI Soft Contact Form 7 Connector.This issue affects Contact Form 7 Connector: from n/a through 1.2.2...

8.8CVSS6.3AI score0.0006EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:21 a.m.4 views

CVE-2024-47310

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arisoft ARI Fancy Lightbox ari-fancy-lightbox allows Stored XSS.This issue affects ARI Fancy Lightbox: from n/a through = 1.3.17...

6.5CVSS5.9AI score0.00193EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:28 a.m.4 views

CVE-2023-51487

Cross-Site Request Forgery CSRF vulnerability in ARI Soft ARI Stream Quiz.This issue affects ARI Stream Quiz: from n/a through 1.2.32...

8.8CVSS8.6AI score0.00051EPSS
Exploits0References1
Rows per page
Query Builder