Lucene search
+L

4053 matches found

CVE
CVE
•added 2023/08/14 2:39 p.m.•70 views

CVE-2023-30751

CVE-2023-30751 affects the WordPress plugin Article Directory Redux (iControlWP Article Directory Redux) versions ≤ 1.0.2. It is described as an Authenticated Stored XSS vulnerability that an administrator can exploit via the plugin’s input handling. Impact is characterized as low for confidentia...

5.9CVSS5AI score0.00369EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/08/14 2:39 p.m.•73 views

CVE-2023-30751 WordPress Article Directory Redux Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in iControlWP Article Directory Redux plugin = 1.0.2 versions...

5.9CVSS5.5AI score0.00369EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/08/14 2:39 p.m.•32 views

CVE-2023-30751 WordPress Article Directory Redux Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in iControlWP Article Directory Redux plugin = 1.0.2 versions...

5.9CVSS5.6AI score0.00369EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/08/14 12:00 a.m.•34 views

PT-2023-22954 · WordPress · Icontrolwp Article Directory Redux

Name of the Vulnerable Software and Affected Versions: iControlWP Article Directory Redux plugin versions 1.0.2 and earlier Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin access can inject malicious scrip...

5.9CVSS5.2AI score0.00369EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2023/08/14 12:00 a.m.•77 views

WordPress plugin article-directory-redux cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6AI score0.00369EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/14 12:00 a.m.•6 views

CVE-2023-30751: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in iControlWP Article Directory Redux plugin = 1.0.2 versions...

5.9CVSS6.6AI score0.00369EPSS
SaveExploits0References2
CNVD
CNVD
•added 2023/08/10 12:00 a.m.•66 views

DedeBIZ Cross-Site Scripting Vulnerability

DedeBIZ is a content management system from China Muyun Intelligent Technology DedeBIZ company. A cross-site scripting vulnerability exists in DedeBIZ version 6.2.10, which stems from the Article Handler component can lead to cross-site scripting vulnerability. No detailed vulnerability details a...

4.8CVSS6AI score0.00613EPSS
SaveExploits1References1
Microsoft Security Update
Microsoft Security Update
•added 2023/08/08 5:00 p.m.•77 views

2023-08 Cumulative Update for Microsoft server operating system, version 22H2 for x64-based Systems (KB5029250)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

6.7AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 2023/08/08 5:00 p.m.•26 views

2023-08 Dynamic Cumulative Update for Windows 10 Version 22H2 for ARM64-based Systems (KB5029244)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

6.7AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 2023/08/08 5:00 p.m.•26 views

2023-08 Security and Quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2008 R2 for x64 (KB5029651)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

6.7AI score
SaveExploits0
NVD
NVD
•added 2023/08/05 7:15 p.m.•31 views

CVE-2023-4170

A vulnerability was found in DedeBIZ 6.2.10. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Article Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public a...

4.8CVSS4AI score0.00613EPSS
SaveExploits1References3
Prion
Prion
•added 2023/08/05 7:15 p.m.•31 views

Cross site scripting

A vulnerability was found in DedeBIZ 6.2.10. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Article Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public a...

4CVSS4.7AI score0.00613EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2023/08/05 6:31 p.m.•26 views

CVE-2023-4170 DedeBIZ Article cross site scripting

A vulnerability was found in DedeBIZ 6.2.10. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Article Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public a...

3.5CVSS3.7AI score
SaveExploits0References5
CVE
CVE
•added 2023/08/05 6:31 p.m.•165 views

CVE-2023-4170

DedeBIZ 6.2.10 is affected, with the Article Handler component enabling cross-site scripting. The issue is exploitable remotely and is publicly disclosed (CVE-2023-4170, VDB-236186). Red Hat/EUVD/CNVD/CVE records corroborate XSS in this version. Root cause detail is not disclosed in the documents...

4.8CVSS4.2AI score0.00613EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2023/08/05 12:00 a.m.•18 views

PT-2023-28055 · Dedebiz · Dedebiz

Name of the Vulnerable Software and Affected Versions: DedeBIZ version 6.2.10 Description: A vulnerability was found in the Article Handler component, which can be exploited to lead to cross site scripting. The attack may be launched remotely. The vendor was contacted early about this disclosure...

4.8CVSS6AI score0.00613EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2023/08/05 12:00 a.m.•17 views

DedeBIZ 跨站脚本漏洞

DedeBIZ is a content management system from China Muyun Intelligent Technology DedeBIZ company. A cross-site scripting vulnerability exists in DedeBIZ version 6.2.10, which stems from the Article Handler component can lead to cross-site scripting vulnerability. No detailed vulnerability details a...

4.8CVSS6.1AI score0.00613EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/05 12:00 a.m.•4 views

CVE-2023-4170: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in DedeBIZ 6.2.10. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Article Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public a...

4.8CVSS3.5AI score0.00613EPSS
SaveExploits1References2
NVD
NVD
•added 2023/07/31 2:15 p.m.•34 views

CVE-2020-21881

Cross Site Request Forgery CSRF vulnerability in admin.php in DuxCMS 2.1 allows remote attackers to modtify application data via article/admin/content/add...

6.5CVSS6.6AI score0.0034EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/31 12:00 a.m.•4 views

CVE-2020-21881: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF vulnerability in admin.php in DuxCMS 2.1 allows remote attackers to modtify application data via article/admin/content/add...

6.5CVSS6.7AI score0.0034EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/07/31 12:00 a.m.•51 views

CVE-2020-21881

Cross Site Request Forgery CSRF vulnerability in admin.php in DuxCMS 2.1 allows remote attackers to modtify application data via article/admin/content/add...

6.6AI score0.0034EPSS
SaveExploits1References1
Rows per page
Query Builder