Lucene search
K

13 matches found

RedhatCVE
RedhatCVE
added 2026/01/01 8:27 p.m.4 views

CVE-2025-50053

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nebelhorn Blappsta Mobile App Plugin - Your native, mobile iPhone App and Android App yournewsapp allows Reflected XSS.This issue affects Blappsta Mobile App Plugin - Your native, mobile iPhone App...

7.1CVSS5.9AI score0.00025EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/31 9:30 p.m.2 views

EUVD-2025-206056

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nebelhorn Blappsta Mobile App Plugin & Your native, mobile iPhone App and Android App allows Reflected XSS.This issue affects Blappsta Mobile App Plugin Your native, mobile iPhone App and Android...

7.1CVSS5.9AI score0.00025EPSS
Exploits0References2
NVD
NVD
added 2025/12/31 8:15 p.m.1 views

CVE-2025-50053

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nebelhorn Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App yournewsapp allows Reflected XSS.This issue affects Blappsta Mobile App Plugin – Your native, mobile iPhone App...

7.1CVSS0.00025EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/31 8:9 p.m.21 views

CVE-2025-50053 WordPress Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App Plugin <= 0.8.8.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nebelhorn Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App yournewsapp allows Reflected XSS.This issue affects Blappsta Mobile App Plugin – Your native, mobile iPhone App...

7.1CVSS0.00025EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/31 12:0 a.m.1 views

WordPress plugin Blappsta Mobile App Plugin 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, with the ability to host personal blog sites on PHP and MySQL based servers.WordPress...

7.1CVSS5.7AI score0.00025EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/10/04 11:53 a.m.5 views

CVE-2025-9200

The Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App plugin for WordPress is vulnerable to SQL Injection via the nhynaacomments function in all versions up to, and including, 0.8.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...

7.5CVSS6.8AI score0.001EPSS
Exploits0References1
NVD
NVD
added 2025/10/03 12:15 p.m.2 views

CVE-2025-9200

The Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App plugin for WordPress is vulnerable to SQL Injection via the nhynaacomments function in all versions up to, and including, 0.8.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...

7.5CVSS0.001EPSS
Exploits0References2
CVE
CVE
added 2025/10/03 11:17 a.m.17 views

CVE-2025-9200

CVE-2025-9200 affects the WordPress plugin “Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App”. The issue is an unauthenticated SQL Injection via nh_ynaa_comments() present in all versions up to 0.8.8.8, caused by insufficient escaping of user-supplied input and inadequa...

7.5CVSS6.4AI score0.001EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/03 11:17 a.m.3 views

CVE-2025-9200 Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App <= 0.8.8.8 - Unauthenticated SQL Injection

The Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App plugin for WordPress is vulnerable to SQL Injection via the nhynaacomments function in all versions up to, and including, 0.8.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...

7.5CVSS6.3AI score0.001EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 11:17 a.m.2 views

EUVD-2025-32262

The Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App plugin for WordPress is vulnerable to SQL Injection via the nhynaacomments function in all versions up to, and including, 0.8.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...

7.5CVSS6.2AI score0.001EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/10/03 11:17 a.m.7 views

CVE-2025-9200 Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App <= 0.8.8.8 - Unauthenticated SQL Injection

The Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App plugin for WordPress is vulnerable to SQL Injection via the nhynaacomments function in all versions up to, and including, 0.8.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...

7.5CVSS0.001EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/10/03 12:49 a.m.4 views

WordPress Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App plugin <= 0.8.8.8 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Jarno Vos jarnovos in WordPress Plugin Blappsta Mobile App Plugin Your native, mobile iPhone App and Android App versions = 0.8.8.8...

7.5CVSS7.8AI score0.001EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/10/03 12:0 a.m.4 views

PT-2025-40487

Name of the Vulnerable Software and Affected Versions Blappsta Mobile App Plugin versions prior to 0.8.8.9 Description The Blappsta Mobile App Plugin for WordPress is susceptible to SQL Injection due to inadequate input sanitization and query preparation. Specifically, the nh ynaa comments functi...

7.5CVSS7.2AI score0.001EPSS
Exploits0References6
Rows per page
Query Builder