Lucene search
+L

6604 matches found

OSV
OSV
•added 2023/10/02 10:15 a.m.•18 views

CVE-2023-44262

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Renzo Johnson Blocks plugin = 1.6.41 versions...

4.8CVSS7.3AI score0.00392EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/02 10:15 a.m.•26 views

CVE-2023-44262

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Renzo Johnson Blocks plugin = 1.6.41 versions...

5.9CVSS5.4AI score0.00392EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/02 10:15 a.m.•23 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Renzo Johnson Blocks plugin = 1.6.41 versions...

4.3CVSS4.8AI score0.00392EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/02 9:55 a.m.•13 views

CVE-2023-44262 WordPress Blocks Plugin <= 1.6.41 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Renzo Johnson Blocks plugin = 1.6.41 versions...

5.9CVSS5.6AI score0.00392EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/02 9:55 a.m.•53 views

CVE-2023-44262

CVE-2023-44262 affects the WordPress Blocks plugin up to version 1.6.41. The vulnerability is an Auth. (admin+) Stored Cross-Site Scripting (XSS) caused by insufficient input validation/escaping of parameters, allowing stored XSS for authenticated administrators. Public exploitation details are n...

5.9CVSS5.1AI score0.00392EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/10/02 9:55 a.m.•40 views

CVE-2023-44262 WordPress Blocks Plugin <= 1.6.41 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Renzo Johnson Blocks plugin = 1.6.41 versions...

5.9CVSS5.5AI score0.00392EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/10/02 12:00 a.m.•20 views

WordPress Plugin Blocks Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.9CVSS6AI score0.00392EPSS
SaveExploits0References3
WPVulnDB
WPVulnDB
•added 2023/10/02 12:00 a.m.•24 views

Blocks <= 1.6.42 - Admin+ Stored XSS

Description The plugin does not validate and escape some parameters, which could allow users with the admin role and above to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5.9CVSS4.8AI score0.00392EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/02 12:00 a.m.•3 views

CVE-2023-44262: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Renzo Johnson Blocks plugin = 1.6.41 versions...

5.9CVSS5.6AI score0.00392EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/10/02 12:00 a.m.•6 views

PT-2023-29175

Name of the Vulnerable Software and Affected Versions Renzo Johnson Blocks plugin versions 1.6.41 and earlier Description The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations For versions 1.6.41 and earlier,...

5.9CVSS5.9AI score0.00392EPSS
SaveExploits0References4
NVD
NVD
•added 2023/09/28 3:15 p.m.•26 views

CVE-2023-43879

Rite CMS 3.0 has a Cross-Site scripting XSS vulnerability that allows attackers to execute arbitrary code via a crafted payload into the Global Content Blocks in the Administration Menu...

4.8CVSS5.1AI score0.00526EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/09/28 3:15 p.m.•9 views

CVE-2023-43879

Rite CMS 3.0 has a Cross-Site scripting XSS vulnerability that allows attackers to execute arbitrary code via a crafted payload into the Global Content Blocks in the Administration Menu...

4.8CVSS6.3AI score0.00526EPSS
SaveExploits1References2
Prion
Prion
•added 2023/09/28 3:15 p.m.•42 views

Cross site scripting

Rite CMS 3.0 has a Cross-Site scripting XSS vulnerability that allows attackers to execute arbitrary code via a crafted payload into the Global Content Blocks in the Administration Menu...

4.3CVSS5.2AI score0.00526EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2023/09/28 12:00 a.m.•17 views

RiteCMS Cross-Site Scripting Vulnerability

RiteCMS is a website CMS. A cross-site scripting vulnerability exists in RiteCMS version 3.0. An attacker can exploit this vulnerability to execute arbitrary code in Global Content Blocks in the Administration Menu via a specially crafted payload...

4.8CVSS6.8AI score0.00526EPSS
SaveExploits1References2
Patchstack
Patchstack
•added 2023/09/28 12:00 a.m.•22 views

WordPress Blocks Plugin <= 1.6.42 is vulnerable to Cross Site Scripting (XSS)

Software Blocks Type Plugin Vulnerable versions = 1.6.42 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-44262 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 02f792d40bcd Credits Rio Darmawan Required privilege...

5.9CVSS6AI score0.00392EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/09/28 12:00 a.m.•22 views

CVE-2023-43879

Rite CMS 3.0 has a Cross-Site scripting XSS vulnerability that allows attackers to execute arbitrary code via a crafted payload into the Global Content Blocks in the Administration Menu...

6.3AI score0.00526EPSS
SaveExploits1References1
CVE
CVE
•added 2023/09/28 12:00 a.m.•136 views

CVE-2023-43879

Summary: CVE-2023-43879 affects RiteCMS 3.0 with a Cross-Site Scripting (XSS) flaw that allows an attacker to run arbitrary code via a crafted payload in the Global Content Blocks within the Administration Menu. The vulnerability is consistently described across multiple connected sources. What’s...

4.8CVSS5.1AI score0.00526EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2023/09/28 12:00 a.m.•39 views

CVE-2023-43879

Rite CMS 3.0 has a Cross-Site scripting XSS vulnerability that allows attackers to execute arbitrary code via a crafted payload into the Global Content Blocks in the Administration Menu...

5.4AI score0.00526EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2023/09/28 12:00 a.m.•19 views

PT-2023-29024 · Ritecms · Ritecms

Name of the Vulnerable Software and Affected Versions: Rite CMS version 3.0 Description: The issue allows attackers to execute arbitrary code via a crafted payload into the Global Content Blocks in the Administration Menu. This is a Cross-Site scripting XSS issue. Recommendations: For Rite CMS...

4.8CVSS6.8AI score0.00526EPSS
SaveExploits1References8
BDU FSTEC
BDU FSTEC
•added 2023/09/28 12:00 a.m.•25 views

The vulnerability of the library for handling Bitcoin transactions and blocks in Libbitcoin Explorer (BX) allows a hacker to expose the protected information.

The vulnerability of the Libbitcoin Explorer BX for processing Bitcoin transactions and blocks is related to the use of a insecure random number generator program. Exploiting this vulnerability could allow an attacker, operating remotely, to disclose sensitive information...

7.8CVSS7.4AI score0.01804EPSS
SaveExploits1References7Affected Software1
Rows per page
Query Builder