Lucene search
+L

2488 matches found

Vulnrichment
Vulnrichment
added 2025/12/31 12:55 p.m.3 views

CVE-2025-62125 WordPress Custom Background Changer plugin <= 3.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Anshul Gangrade Custom Background Changer custom-background-changer allows Stored XSS.This issue affects Custom Background Changer: from n/a through 3.0...

6.5CVSS5.6AI score0.00132EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/31 12:55 p.m.33 views

CVE-2025-62125 WordPress Custom Background Changer plugin <= 3.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Anshul Gangrade Custom Background Changer custom-background-changer allows Stored XSS.This issue affects Custom Background Changer: from n/a through = 3.0...

6.5CVSS0.00132EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/12/31 12:52 p.m.10 views

WordPress Custom Background Changer plugin <= 3.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Custom Background Changer versions = 3.0...

6.5CVSS5.9AI score0.00132EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/12/31 12:0 a.m.6 views

WordPress plugin Custom Background Changer 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.9AI score0.00132EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/31 12:0 a.m.11 views

PT-2025-54320

Name of the Vulnerable Software and Affected Versions Anshul Gangrade Custom Background Changer versions through 3.0 Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, potentially leading to Cross-site Scripting XSS. This allows fo...

6.5CVSS6.3AI score0.00132EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2025/12/30 1:16 p.m.5 views

CVE-2023-54195

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix timeout of a call that hasn't yet been granted a channel afsmakecall calls rxrpckernelbegincall to begin a call which may get stalled in the background waiting for a connection to become available; it then calls...

5.7AI score0.00172EPSS
SaveExploits0References5
OSV
OSV
added 2025/12/24 8:15 p.m.9 views

CVE-2018-25146

Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated attackers to list and manipulate running system processes. Attackers can send arbitrary signals to kill background processes and system services through a hidden feature, potentially causing service...

8.1CVSS5.9AI score0.00426EPSS
SaveExploits2References3
NVD
NVD
added 2025/12/24 8:15 p.m.21 views

CVE-2018-25146

Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated attackers to list and manipulate running system processes. Attackers can send arbitrary signals to kill background processes and system services through a hidden feature, potentially causing service...

8.1CVSS0.00426EPSS
SaveExploits2References3
Vulnrichment
Vulnrichment
added 2025/12/24 7:27 p.m.4 views

CVE-2018-25146 Microhard Systems IPn4G 1.1.0 Service Control Denial of Service

Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated attackers to list and manipulate running system processes. Attackers can send arbitrary signals to kill background processes and system services through a hidden feature, potentially causing service...

8.1CVSS5.5AI score0.00426EPSS
SaveExploits2References3
OSV
OSV
added 2025/12/23 6:30 p.m.11 views

GHSA-QX44-P258-3C2V Cadmium CMS has a background arbitrary file upload vulnerability

Cadmium CMS v.0.4.9 has a background arbitrary file upload vulnerability in /admin/content/filemanager/uploads...

8.7CVSS7.1AI score0.00341EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2025/12/23 6:30 p.m.13 views

Cadmium CMS has a background arbitrary file upload vulnerability

Cadmium CMS v.0.4.9 has a background arbitrary file upload vulnerability in /admin/content/filemanager/uploads...

9.8CVSS7.2AI score0.00341EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2025/12/23 12:0 a.m.34 views

CVE-2025-51511

Cadmium CMS v.0.4.9 has a background arbitrary file upload vulnerability in /admin/content/filemanager/uploads...

0.00341EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/12/17 10:3 a.m.9 views

CVE-2025-68054

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup CountDown With Image or Video Background countdownwithbackground allows Blind SQL Injection.This issue affects CountDown With Image or Video Background: from n/a through = 1.5...

8.5CVSS7.7AI score0.00218EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/16 5:16 p.m.9 views

CVE-2023-53901

WBCE CMS 1.6.1 contains a cross-site scripting vulnerability that allows attackers to inject malicious HTML and CSS to capture user keystrokes. Attackers can upload a crafted HTML file with CSS-based keylogging techniques to intercept password characters through background image requests...

7.1CVSS0.00235EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/12/16 9:31 a.m.9 views

EUVD-2025-203553

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup CountDown With Image or Video Background countdownwithbackground allows Blind SQL Injection.This issue affects CountDown With Image or Video Background: from n/a through = 1.5...

8.5CVSS7.1AI score0.00218EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/16 9:16 a.m.6 views

CVE-2025-68054

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup CountDown With Image or Video Background countdownwithbackground allows Blind SQL Injection.This issue affects CountDown With Image or Video Background: from n/a through = 1.5...

8.5CVSS0.00218EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/16 8:12 a.m.1 views

CVE-2025-68054 WordPress CountDown With Image or Video Background plugin <= 1.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup CountDown With Image or Video Background countdownwithbackground allows Blind SQL Injection.This issue affects CountDown With Image or Video Background: from n/a through = 1.5...

8.5CVSS7.3AI score0.00218EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/16 8:12 a.m.17 views

CVE-2025-68054

CVE-2025-68054 concerns a SQL injection in the WordPress plugin “CountDown With Image or Video Background” (countdown_with_background). The Wordfence vulnerability detail specifies this is an authenticated, blind SQL injection affecting Version ≤ 1.5, with patch status listed as Unpatched in the ...

8.5CVSS7.3AI score0.00218EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/16 8:12 a.m.46 views

CVE-2025-68054 WordPress CountDown With Image or Video Background plugin <= 1.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup CountDown With Image or Video Background countdownwithbackground allows Blind SQL Injection.This issue affects CountDown With Image or Video Background: from n/a through = 1.5...

8.5CVSS0.00218EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.9 views

WordPress plugin CountDown With Image or Video Background 安全漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress plugin...

8.5CVSS7.4AI score0.00218EPSS
SaveExploits0References1
Rows per page
Query Builder