Lucene search
K

19 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-3261

Malicious code in bioql PyPI...

7.1CVSS8.7AI score0.00187EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:57 a.m.1 views

CVE-2023-0892

The BizLibrary WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS4.8AI score0.00226EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/02/06 2:52 a.m.6 views

CVE-2025-23580

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matthew BizLibrary bizlibrary allows Reflected XSS.This issue affects BizLibrary: from n/a through = 1.1...

7.1CVSS7.2AI score0.00187EPSS
Exploits0References1
NVD
NVD
added 2025/01/21 6:15 p.m.7 views

CVE-2025-23580

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matthew BizLibrary bizlibrary allows Reflected XSS.This issue affects BizLibrary: from n/a through = 1.1...

7.1CVSS0.00187EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/21 5:21 p.m.14 views

CVE-2025-23580 WordPress BizLibrary plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matthew BizLibrary bizlibrary allows Reflected XSS.This issue affects BizLibrary: from n/a through = 1.1...

7.1CVSS0.00187EPSS
Exploits0References1
CVE
CVE
added 2025/01/21 5:21 p.m.48 views

CVE-2025-23580

CVE-2025-23580 is a Reflected XSS vulnerability in BizLibrary (WordPress plugin). The issue arises from improper neutralization of input during web page generation, enabling reflected cross-site scripting. It affects BizLibrary versions up to 1.1. The vulnerability entry is active in public advis...

7.1CVSS7.2AI score0.00187EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/21 5:21 p.m.6 views

CVE-2025-23580 WordPress BizLibrary plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matthew Garvin BizLibrary allows Reflected XSS. This issue affects BizLibrary: from n/a through 1.1...

7.1CVSS7AI score0.00187EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/21 12:0 a.m.1 views

WordPress plugin BizLibrary 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.6AI score0.00187EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/01/16 6:41 p.m.2 views

WordPress BizLibrary plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin BizLibrary versions = 1.1...

7.1CVSS6.1AI score0.00187EPSS
Exploits0Affected Software1
NVD
NVD
added 2023/05/15 1:15 p.m.11 views

CVE-2023-0892

The BizLibrary WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS4.7AI score0.00226EPSS
Exploits2References1
OSV
OSV
added 2023/05/15 1:15 p.m.2 views

CVE-2023-0892

The BizLibrary WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS6.6AI score
Exploits0References1
Prion
Prion
added 2023/05/15 1:15 p.m.12 views

Cross site scripting

The BizLibrary WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.3CVSS4.7AI score0.00226EPSS
Exploits2References1Affected Software1
CVE
CVE
added 2023/05/15 12:15 p.m.55 views

CVE-2023-0892

The CVE-2023-0892 vulnerability affects the BizLibrary WordPress plugin (versions

4.8CVSS4.9AI score0.00226EPSS
Exploits2References1Affected Software1
Cvelist
Cvelist
added 2023/05/15 12:15 p.m.15 views

CVE-2023-0892 BizLibrary <= 1.1 - Admin+ Stored XSS

The BizLibrary WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5AI score0.00226EPSS
Exploits2References1
Vulnrichment
Vulnrichment
added 2023/05/15 12:15 p.m.7 views

CVE-2023-0892 BizLibrary <= 1.1 - Admin+ Stored XSS

The BizLibrary WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.7AI score0.00226EPSS
Exploits2References1
Positive Technologies
Positive Technologies
added 2023/05/15 12:0 a.m.2 views

PT-2023-16595 · WordPress · Bizlibrary Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: BizLibrary WordPress plugin versions 1.1 and earlier Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for example in...

4.8CVSS8AI score0.00226EPSS
Exploits2References5
CNNVD
CNNVD
added 2023/05/15 12:0 a.m.2 views

WordPress plugin BizLibrary 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

4.8CVSS6.3AI score0.00226EPSS
Exploits2References2
Patchstack
Patchstack
added 2023/04/27 12:0 a.m.9 views

WordPress BizLibrary Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)

Software BizLibrary Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0892 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 0d89568b8042 Credits Shreya Pohekar Required privilege...

4.8CVSS6AI score0.00226EPSS
Exploits2References3Affected Software1
wpexploit
wpexploit
added 2023/04/19 12:0 a.m.134 views

BizLibrary <= 1.1 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup 1. Login as Admin. 2. Go to...

4.8CVSS7.8AI score0.00226EPSS
Exploits2
Rows per page
Query Builder