Lucene search
K

14 matches found

NVD
NVD
added 2026/06/18 1:25 p.m.10 views

CVE-2026-8039

The Fancy Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'author' shortcode attribute in the 'testimonial' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...

6.4CVSS0.00187EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/06/18 7:48 a.m.20 views

CVE-2026-8039 Fancy Testimonials <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting

The Fancy Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'author' shortcode attribute in the 'testimonial' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...

6.4CVSS0.00187EPSS
Exploits0References3
CVE
CVE
added 2026/06/18 7:48 a.m.13 views

CVE-2026-8039

The CVE-2026-8039 entry concerns the WordPress plugin Fancy Testimonials (versions ≤ 1.0). It describes a Stored Cross-Site Scripting (XSS) vulnerability via the author attribute of the testimonial shortcode, caused by insufficient input sanitization/output escaping. Impacted condition: authentic...

6.4CVSS5.5AI score0.00187EPSS
Exploits0References3
EUVD
EUVD
added 2026/06/18 7:48 a.m.7 views

EUVD-2026-37867

The Fancy Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'author' shortcode attribute in the 'testimonial' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...

6.4CVSS5.6AI score0.00187EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2018-21554

Malware in sbrugna...

8.8CVSS8.8AI score0.02773EPSS
Exploits0References3
OSV
OSV
added 2018/05/17 3:29 p.m.2 views

CVE-2018-9962

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.1AI score0.02773EPSS
Exploits0References2
Prion
Prion
added 2018/05/17 3:29 p.m.16 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS8.8AI score0.02773EPSS
Exploits0References2Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2018/04/20 12:0 a.m.22 views

Foxit Reader Annotation author Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

6.8CVSS4.6AI score0.02773EPSS
Exploits0References1
CNVD
CNVD
added 2017/12/21 12:0 a.m.2 views

Remote Code Execution Vulnerability in the author Property of the Foxit Reader Circle Annotation Object

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. A remote code execution vulnerability exists in the author attribute of the Circle Annotation object in Foxit Reader version 8.3.1.21155, which originates from a program failing to validate the existence of an object...

8.8CVSS8.3AI score0.0259EPSS
Exploits0References1
CNVD
CNVD
added 2017/12/21 12:0 a.m.4 views

Foxit Reader Document Object author Attribute Remote Code Execution Vulnerability

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. A remote code execution vulnerability exists in the author attribute of the Document object in Foxit Reader version 8.3.2.25013, where the program fails to adequately validate the existence of an object before...

8.8CVSS8.3AI score0.0259EPSS
Exploits0References1
OSV
OSV
added 2017/12/20 2:29 p.m.1 views

CVE-2017-14831

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.1AI score0.0259EPSS
Exploits0References2
NVD
NVD
added 2017/12/20 2:29 p.m.24 views

CVE-2017-16581

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.2.25013. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS8.8AI score0.0259EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2017/12/20 2:29 p.m.2 views

CVE-2017-16581

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.2.25013. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.2AI score0.0259EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2017/12/20 2:0 p.m.58 views

CVE-2017-16581

Foxit Reader 8.3.2.25013 is affected by CVE-2017-16581. The vulnerability is a remote code execution flaw in the author attribute of the Document object due to not validating the existence of an object before performing operations. Exploitation requires user interaction (visiting a malicious page...

8.8CVSS8.8AI score0.0259EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder