Lucene search
+L

6 matches found

CVE
CVE
added 2025/10/07 1:29 p.m.17 views

CVE-2021-22291

ABB EIBPORT V3 KNX and ABB EIBPORT V3 KNX GSM are affected by a reflected XSS due to improper input neutralization during web page generation. Affects versions prior to 3.9.2 for V3 KNX and prior to 3.9.2 for V3 KNX GSM. The vulnerability could allow attackers to execute scripts in the user’s bro...

8.5CVSS6.1AI score0.00302EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/03/29 12:0 a.m.6 views

Algoritimk E-commerce Software 跨站脚本漏洞

Algoritimk E-commerce Software is an e-commerce platform software from Algoritimk. A cross-site scripting vulnerability exists in Algoritimk E-commerce Software versions prior to 3.9.2, which stems from improper neutralization of user input...

6.1CVSS6.1AI score0.0033EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/03/29 12:0 a.m.7 views

PT-2024-14862

Name of the Vulnerable Software and Affected Versions Algoritim E-commerce Software versions prior to 3.9.2 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This means an attacker can injec...

6.1CVSS5.8AI score0.0033EPSS
Exploits0References9
CNNVD
CNNVD
added 2023/02/06 12:0 a.m.19 views

WordPress plugin Stream 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS6.5AI score0.0091EPSS
Exploits2References2
CNVD
CNVD
added 2020/06/22 12:0 a.m.3 views

Mattermost Server Code Issue Vulnerability (CNVD-2020-35336)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 4.0.0, prior to 3.10.2, and prior to 3.9.2, which stems from the program's inability to disable a session. No details of the...

5.3CVSS6.8AI score0.00769EPSS
Exploits0References1
Cvelist
Cvelist
added 2014/08/18 10:0 a.m.37 views

CVE-2014-5240

Cross-site scripting XSS vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2, when Multisite is enabled, allows remote authenticated administrators to inject arbitrary web script or HTML, and obtain Super Admin privileges, via a crafted avatar URL...

5.1AI score0.02196EPSS
Exploits0References4
Rows per page
Query Builder