Lucene search
+L

2474 matches found

vulnersOsv
vulnersOsv
added 2025/12/01 6:30 p.m.8 views

com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (=6.0.0), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (=6.0.0) +53 more potentially affected by CVE-2025-64775 via org.apache.struts:struts2-core (>=7.0.0 <=7.0.3)

org.apache.struts:struts2-core MAVEN version =7.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.3 and more Source cves: CVE-2025-64775 Source advisory: OSV:GHSA-XX7V-HQXH-CJR9...

7.5CVSS7.3AI score0.01486EPSS
SaveExploits0
Snyk
Snyk
added 2025/11/30 1:14 p.m.3 views

Malicious Package

Overview bootstrap-setcolors is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this...

9.8CVSS7.2AI score
SaveExploits0References3
Snyk
Snyk
added 2025/11/30 1:14 p.m.7 views

Malicious Package

Overview bootstrap-setflexcolor is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this...

9.8CVSS7.2AI score
SaveExploits0References3
The Hacker News
The Hacker News
added 2025/11/28 4:27 p.m.13 views

Legacy Python Bootstrap Scripts Create Domain-Takeover Risk in Multiple PyPI Packages

Cybersecurity researchers have discovered vulnerable code in legacy Python packages that could potentially pave the way for a supply chain compromise on the Python Package Index PyPI via a domain takeover attack. Software supply chain security company ReversingLabs said it found the "vulnerabilit...

9.8CVSS9.2AI score0.01535EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/11/22 8:35 a.m.9 views

CVE-2025-11764

The Shortcodes Bootstrap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' parameter in the notification shortcode in all versions up to, and including, 1.1. This is due to missing input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS5AI score0.00181EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/11/21 7:31 a.m.6 views

EUVD-2025-198419

The Shortcodes Bootstrap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' parameter in the notification shortcode in all versions up to, and including, 1.1. This is due to missing input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS4.6AI score0.00181EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/11/21 7:31 a.m.15 views

CVE-2025-11764 Shortcodes Bootstrap <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Shortcodes Bootstrap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' parameter in the notification shortcode in all versions up to, and including, 1.1. This is due to missing input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS0.00181EPSS
SaveExploits0References2
CVE
CVE
added 2025/11/21 7:31 a.m.20 views

CVE-2025-11764

CVE-2025-11764 affects the WordPress plugin Shortcodes Bootstrap (versions

6.4CVSS4.7AI score0.00181EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/11/21 7:31 a.m.2 views

CVE-2025-11764 Shortcodes Bootstrap <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Shortcodes Bootstrap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' parameter in the notification shortcode in all versions up to, and including, 1.1. This is due to missing input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS4.6AI score0.00181EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/11/21 12:0 a.m.7 views

WordPress plugin Shortcodes Bootstrap 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.9AI score0.00181EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/11/21 12:0 a.m.8 views

PT-2025-47676

The Shortcodes Bootstrap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' parameter in the notification shortcode in all versions up to, and including, 1.1. This is due to missing input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS5AI score0.00181EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/11/20 10:25 p.m.10 views

WordPress Shortcodes Bootstrap plugin <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Shortcodes Bootstrap versions = 1.1...

6.4CVSS5.7AI score0.00181EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2025/11/13 3:23 a.m.4 views

EUVD-2025-177447

Malicious code in ophiuchus-bootstrap-perseus-airbnb npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.11 views

EUVD-2025-176974

Malicious code in protractor-nightwatch-schema-bootstrap npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.6 views

EUVD-2025-179646

Malicious code in command-react-bootstrap-neuromorphic-magellan npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.6 views

EUVD-2025-176257

Malicious code in spectroscopy-webdriver-manager-await-bootstrap npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.7 views

EUVD-2025-177872

Malicious code in metalsmith-xanthus-react-bootstrap-sequelize npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.6 views

EUVD-2025-177111

Malicious code in polaris-octans-bootstrap-bootstrap npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.9 views

EUVD-2025-177755

Malicious code in morgan-react-bootstrap-cz-conventional-changelog-helios npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.2 views

EUVD-2025-179990

Malicious code in bootstrap-semantic-release-pulsar-koa npm...

6.6AI score
SaveExploits0
Rows per page
Query Builder