Lucene search
K

68 matches found

Cvelist
Cvelist
added 2024/05/17 5:59 a.m.21 views

CVE-2024-34757 WordPress Borderless plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Visualmodo Borderless borderless allows DOM-Based XSS.This issue affects Borderless: from n/a through = 1.7.3...

6.5CVSS6.8AI score0.00287EPSS
Exploits0References1
CVE
CVE
added 2024/05/17 5:59 a.m.52 views

CVE-2024-34757

CVE-2024-34757 is a Stored XSS vulnerability (Improper Neutralization of Input During Web Page Generation) in Visualmodo Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg. The issue affects Borderless from version before 1.5.3, causing stored cross-site scripting thr...

6.5CVSS5.9AI score0.00287EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2024/05/17 12:0 a.m.2 views

WordPress plugin Borderless 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

6.5CVSS6AI score0.00287EPSS
Exploits0References2
OSV
OSV
added 2024/05/14 11:15 p.m.1 views

CVE-2024-4666

The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.5.3 due to insufficient input sanitization and output escaping on user supplied...

5.4CVSS6AI score
Exploits0References8
Cvelist
Cvelist
added 2024/05/14 10:31 p.m.13 views

CVE-2024-4666 Borderless - Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.5.3 due to insufficient input sanitization and output escaping on user supplied...

6.4CVSS6AI score0.00341EPSS
Exploits0References8
Vulnrichment
Vulnrichment
added 2024/05/14 10:31 p.m.9 views

CVE-2024-4666 Borderless - Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.5.3 due to insufficient input sanitization and output escaping on user supplied...

6.4CVSS5.8AI score0.00341EPSS
Exploits0References8
CVE
CVE
added 2024/05/14 10:31 p.m.28 views

CVE-2024-4666

CVE-2024-4666 applies to Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg (WordPress). It is a stored XSS vulnerability in multiple widgets across all versions up to 1.5.3, caused by insufficient input sanitization and inadequate output escaping on user-supplied att...

6.4CVSS5.7AI score0.00341EPSS
Exploits0References8Affected Software1
Patchstack
Patchstack
added 2024/05/14 2:22 p.m.3 views

WordPress Borderless plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Abu Hurayra in WordPress Plugin Borderless versions = 1.7.3...

6.5CVSS6.1AI score0.00287EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/05/14 10:43 a.m.3 views

WordPress Borderless plugin <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Multiple Widgets vulnerability discovered by stealthcopter in WordPress Plugin Borderless versions = 1.5.3...

6.4CVSS5.8AI score0.00341EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/05/14 12:0 a.m.12 views

WordPress Borderless Plugin <= 1.5.7 is vulnerable to Cross Site Scripting (XSS)

Software Borderless Type Plugin Vulnerable versions = 1.5.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34757 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6690481ece90 Credits Khalid Yusuf Required privilege Contributor...

6.5CVSS6.6AI score0.00287EPSS
Exploits0References2Affected Software1
Patchstack
Patchstack
added 2024/05/14 12:0 a.m.14 views

WordPress Borderless Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)

Software Borderless Type Plugin Vulnerable versions = 1.5.3 Fixed in 1.5.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4666 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d9fe795f805d Credits stealthcopter Required...

6.4CVSS5.8AI score0.00341EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2024/05/14 12:0 a.m.1 views

WordPress plugin Borderless 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.4CVSS6.3AI score0.00341EPSS
Exploits0References10
WPVulnDB
WPVulnDB
added 2023/09/13 12:0 a.m.23 views

Borderless < 1.4.9 - Admin+ Stored XSS

Description The plugin does not validate and escape some parameters, which could allow users with the admin role and above to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5.9CVSS5.6AI score0.00079EPSS
Exploits0Affected Software1
OSV
OSV
added 2023/09/03 12:15 p.m.1 views

CVE-2023-38518

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Visualmodo Borderless plugin = 1.4.8 versions...

4.8CVSS7.3AI score0.00079EPSS
Exploits0References1
NVD
NVD
added 2023/09/03 12:15 p.m.16 views

CVE-2023-38518

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Visualmodo Borderless plugin = 1.4.8 versions...

5.9CVSS5.4AI score0.00079EPSS
Exploits0References1
Prion
Prion
added 2023/09/03 12:15 p.m.21 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Visualmodo Borderless plugin = 1.4.8 versions...

4.3CVSS4.8AI score0.00079EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/09/03 11:16 a.m.26 views

CVE-2023-38518 WordPress Borderless Plugin <= 1.4.8 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Visualmodo Borderless plugin = 1.4.8 versions...

5.9CVSS5.5AI score0.00079EPSS
Exploits0References1
CVE
CVE
added 2023/09/03 11:16 a.m.55 views

CVE-2023-38518

CVE-2023-38518 concerns the WordPress plugin Borderless by Visualmodo, affected versions are ≤ 1.4.8. The vulnerability is described as an authenticated (admin+) Stored Cross-Site Scripting (XSS) flaw, allowing an attacker with admin+ privileges to inject scripts that execute in other users’ sess...

5.9CVSS5AI score0.00079EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/03 11:16 a.m.15 views

CVE-2023-38518 WordPress Borderless Plugin <= 1.4.8 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Visualmodo Borderless plugin = 1.4.8 versions...

5.9CVSS5.6AI score0.00079EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/09/03 12:0 a.m.4 views

WordPress plugin Borderless cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

5.9CVSS6AI score0.00079EPSS
Exploits0References2
Rows per page
Query Builder