Lucene search
+L

1059 matches found

OSV
OSV
added 2021/10/11 11:15 a.m.12 views

CVE-2021-24545

The WP HTML Author Bio WordPress plugin through 1.2.0 does not sanitise the HTML allowed in the Bio of users, allowing them to use malicious JavaScript code, which will be executed when anyone visit a post in the frontend made by such user. As a result, user with a role as low as author could...

5.4CVSS5.7AI score0.018EPSS
SaveExploits3References1
Prion
Prion
added 2021/10/11 11:15 a.m.21 views

Cross site scripting

The WP HTML Author Bio WordPress plugin through 1.2.0 does not sanitise the HTML allowed in the Bio of users, allowing them to use malicious JavaScript code, which will be executed when anyone visit a post in the frontend made by such user. As a result, user with a role as low as author could...

3.5CVSS5.4AI score0.018EPSS
SaveExploits3References1Affected Software1
Cvelist
Cvelist
added 2021/10/11 10:45 a.m.35 views

CVE-2021-24545 WP HTML Author Bio <= 1.2.0 - Author+ Stored Cross-Site Scripting

The WP HTML Author Bio WordPress plugin through 1.2.0 does not sanitise the HTML allowed in the Bio of users, allowing them to use malicious JavaScript code, which will be executed when anyone visit a post in the frontend made by such user. As a result, user with a role as low as author could...

5.7AI score0.018EPSS
SaveExploits3References1
CNNVD
CNNVD
added 2021/10/11 12:00 a.m.19 views

WordPress 插件 跨站脚本漏洞

WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the WordPress plugin WP HTML Author Bio prior to version 1.2.0, which stems from the software's lack of valid validation and escaping of a user's HTML, allowing them to use maliciou...

5.4CVSS5.6AI score0.018EPSS
SaveExploits3References2
Patchstack
Patchstack
added 2021/09/21 12:00 a.m.31 views

WordPress WP HTML Author Bio plugin <= 1.2.0 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Veshraj Ghimire in WordPress WP HTML Author Bio plugin versions = 1.2.0. Solution Deactivate and delete. This plugin has been closed as of July 19, 2021 and is not available for download. Reason: Security Issue...

5.4CVSS0.5AI score0.018EPSS
SaveExploits3References3Affected Software1
Openbugbounty
Openbugbounty
added 2021/09/11 6:28 a.m.18 views

bio-chia-samen.com Cross Site Scripting vulnerability OBB-2138083

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Openbugbounty
Openbugbounty
added 2021/09/11 6:28 a.m.15 views

bio-microarray.com Cross Site Scripting vulnerability OBB-2138084

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Openbugbounty
Openbugbounty
added 2021/08/31 5:08 a.m.27 views

bio-protocol.org Cross Site Scripting vulnerability OBB-2129857

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
OpenVAS
OpenVAS
added 2021/08/16 12:00 a.m.32 views

OpenSSL: ASN1 BIO Vulnerability (20120419) - Windows

OpenSSL is prone to an exploitable vulnerability in the function asn1d2ireadbio. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

7.5CVSS7.6AI score0.47913EPSS
SaveExploits8References1
OpenVAS
OpenVAS
added 2021/08/16 12:00 a.m.14 views

OpenSSL: ASN1 BIO Vulnerability (20120419) - Linux

OpenSSL is prone to an exploitable vulnerability in the function asn1d2ireadbio. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

7.5CVSS7.6AI score0.47913EPSS
SaveExploits8References1
OpenVAS
OpenVAS
added 2021/08/16 12:00 a.m.34 views

OpenSSL: ASN1 BIO Incomplete Fix (20120424) - Linux

OpenSSL is prone to an incomplete fix. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute i...

7.7AI score
SaveExploits0References1
Oracle linux
Oracle linux
added 2021/01/12 12:00 a.m.168 views

Unbreakable Enterprise kernel-container security update

4.14.35-2025.404.1.1.el7 - target: fix XCOPY NAA identifier lookup David Disseldorp Orabug: 32248040 CVE-2020-28374 4.14.35-2025.404.1.el7 - xenbus/xenbusbackend: Disallow pending watch messages SeongJae Park Orabug: 32253412 CVE-2020-29568 - xen/xenbus: Count pending messages for each watch...

9.3CVSS8AI score0.06692EPSS
SaveExploits14
RedHat Linux
RedHat Linux
added 2020/12/15 5:11 p.m.151 views

Moderate: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

4.3CVSS6.4AI score0.05271EPSS
SaveExploits0References2
HackRead
HackRead
added 2020/12/02 9:21 a.m.27 views

Malware attack can trick biologists into producing dangerous toxins

By Deeba Ahmed Researchers urge for improving bio-cybersecurity as threat actors can use malware to target Synthetic DNA Orders to modify DNA strings sequence. This is a post from HackRead.com Read the original post: Malware attack can trick biologists into producing dangerous toxins...

3.8AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/10/11 6:08 a.m.6 views

bio-evolution.net Cross Site Scripting vulnerability OBB-1396319

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/10/01 7:44 a.m.10 views

bio-innovations.org Cross Site Scripting vulnerability OBB-1375736

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/09/26 12:43 p.m.4 views

bio-energetique.ch Cross Site Scripting vulnerability OBB-1365927

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/09/18 9:00 a.m.5 views

bio-energetique.ch Cross Site Scripting vulnerability OBB-1346234

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/09/14 8:17 p.m.7 views

bio-energetique.ch Cross Site Scripting vulnerability OBB-1336883

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/09/11 3:34 p.m.5 views

bio-energetique.ch Cross Site Scripting vulnerability OBB-1326294

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Rows per page
Query Builder