Lucene search
+L

33 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•6 views

CVE-2024-56274: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Astra Widgets astra-widgets allows Stored XSS.This issue affects Astra Widgets: from n/a through = 1.2.15...

6.5CVSS5.8AI score0.00301EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/07 12:00 a.m.•23 views

WordPress plugin Astra Widgets 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

6.5CVSS7.7AI score0.00301EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/03 11:20 a.m.•20 views

WordPress Astra Widgets plugin <= 1.2.15 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara in WordPress Plugin Astra Widgets versions = 1.2.15...

6.5CVSS6.1AI score0.00301EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2024/10/28 6:15 p.m.•9 views

CVE-2024-50439

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Brainstorm Force Astra Widgets allows Stored XSS.This issue affects Astra Widgets: from n/a through 1.2.14...

5.4CVSS5.8AI score0.00254EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/28 6:15 p.m.•30 views

CVE-2024-50439

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Astra Widgets astra-widgets allows Stored XSS.This issue affects Astra Widgets: from n/a through = 1.2.14...

6.5CVSS0.00254EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/28 6:06 p.m.•74 views

CVE-2024-50439

CVE-2024-50439 concerns Astra Widgets (WordPress plugin) with a Stored XSS due to improper input neutralization during web page generation. Affected versions are Astra Widgets up to 1.2.14; Patch: 1.2.15 or later fixes the issue. Public disclosures and third‑party sources (Patchstack, Red Hat adv...

6.5CVSS5.9AI score0.00254EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/10/28 6:06 p.m.•20 views

CVE-2024-50439 WordPress Astra Widgets plugin <= 1.2.14 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Astra Widgets astra-widgets allows Stored XSS.This issue affects Astra Widgets: from n/a through = 1.2.14...

6.5CVSS5.9AI score0.00254EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/28 6:06 p.m.•49 views

CVE-2024-50439 WordPress Astra Widgets plugin <= 1.2.14 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Astra Widgets astra-widgets allows Stored XSS.This issue affects Astra Widgets: from n/a through = 1.2.14...

6.5CVSS0.00254EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/28 12:00 a.m.•19 views

PT-2024-34214 · Unknown · Astra Widgets

Name of the Vulnerable Software and Affected Versions: Astra Widgets versions 1.2.14 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For...

6.5CVSS5.6AI score0.00254EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/28 12:00 a.m.•4 views

CVE-2024-50439: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Astra Widgets astra-widgets allows Stored XSS.This issue affects Astra Widgets: from n/a through = 1.2.14...

6.5CVSS5.8AI score0.00254EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/10/28 12:00 a.m.•24 views

WordPress plugin Astra Widgets 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

6.5CVSS6AI score0.00254EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/10/24 9:36 a.m.•16 views

WordPress Astra Widgets plugin <= 1.2.14 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Astra Widgets versions = 1.2.14...

6.5CVSS5.8AI score0.00254EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/10/24 12:00 a.m.•26 views

WordPress Astra Widgets Plugin <= 1.2.14 is vulnerable to Cross Site Scripting (XSS)

Software Astra Widgets Type Plugin Vulnerable versions = 1.2.14 Fixed in 1.2.15 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50439 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID aae8162e86d9 Credits João Pedro S Alcântara Kinorth Require...

6.5CVSS6.3AI score0.00254EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder