Lucene search
+L

298 matches found

Cvelist
Cvelist
added 2025/05/19 6:16 p.m.25 views

CVE-2025-43839 WordPress BP Messages Tool plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in shanebp BP Messages Tool bp-messages-tool allows Reflected XSS.This issue affects BP Messages Tool: from n/a through = 2.2...

7.1CVSS0.00202EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/19 12:0 a.m.11 views

PT-2025-22063 · Unknown · Shanebp Bp Messages Tool

Name of the Vulnerable Software and Affected Versions: shanebp BP Messages Tool versions n/a through 2.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This means that an attacker...

7.1CVSS7.2AI score0.00202EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/04/29 12:22 p.m.12 views

WordPress BP Messages Tool plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien Patchstack Alliance in WordPress Plugin BP Messages Tool versions = 2.2...

7.1CVSS7.5AI score0.00202EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/04/26 5:48 p.m.25 views

CVE-2025-46541

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in elrata WP-reCAPTCHA-bp wp-recaptcha-bp allows Stored XSS.This issue affects WP-reCAPTCHA-bp: from n/a through = 4.1...

5.9CVSS7.2AI score0.00214EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/24 4:15 p.m.21 views

CVE-2025-46541

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in elrata WP-reCAPTCHA-bp wp-recaptcha-bp allows Stored XSS.This issue affects WP-reCAPTCHA-bp: from n/a through = 4.1...

5.9CVSS0.00214EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/24 4:9 p.m.35 views

CVE-2025-46541 WordPress WP-reCAPTCHA-bp plugin <= 4.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in elrata WP-reCAPTCHA-bp wp-recaptcha-bp allows Stored XSS.This issue affects WP-reCAPTCHA-bp: from n/a through = 4.1...

5.9CVSS0.00214EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/24 4:9 p.m.9 views

CVE-2025-46541 WordPress WP-reCAPTCHA-bp <= 4.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in elrata WP-reCAPTCHA-bp allows Stored XSS. This issue affects WP-reCAPTCHA-bp: from n/a through 4.1...

5.9CVSS5.7AI score0.00214EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/24 4:9 p.m.60 views

CVE-2025-46541

CVE-2025-46541 describes a Stored XSS in the WordPress plugin WP-reCAPTCHA-bp (affected: versions n/a through 4.1). The root cause is improper neutralization of input during web page generation, allowing injected scripts to be stored and potentially executed in subsequent views. Connected sources...

5.9CVSS7.2AI score0.00214EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/24 12:0 a.m.8 views

PT-2025-17840 · WordPress · Wp-Recaptcha-Bp

Name of the Vulnerable Software and Affected Versions: WP-reCAPTCHA-bp versions n/a through 4.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means that an attacker can inject...

5.9CVSS6.3AI score0.00214EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/04/11 6:9 p.m.19 views

CVE-2025-32493

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VibeThemes BP Social Connect bp-social-connect allows Stored XSS.This issue affects BP Social Connect: from n/a through = 1.6.2...

5.9CVSS7.2AI score0.00347EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/04/09 5:29 p.m.11 views

WordPress BP Social Connect plugin <= 1.6.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin BP Social Connect versions = 1.6.2...

5.9CVSS7.1AI score0.00347EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/04/09 5:15 p.m.22 views

CVE-2025-32493

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VibeThemes BP Social Connect bp-social-connect allows Stored XSS.This issue affects BP Social Connect: from n/a through = 1.6.2...

5.9CVSS0.00347EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/09 4:9 p.m.7 views

CVE-2025-32493 WordPress BP Social Connect <= 1.6.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VibeThemes BP Social Connect allows Stored XSS. This issue affects BP Social Connect: from n/a through 1.6.2...

5.9CVSS5.7AI score0.00347EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/09 4:9 p.m.61 views

CVE-2025-32493

CVE-2025-32493 is a stored XSS vulnerability in the WordPress plugin BP Social Connect (affected: up to version 1.6.2). The connected Wordfence entry indicates an authenticated (Administrator+) Stored Cross‑Site Scripting flaw in BP Social Connect

5.9CVSS7.2AI score0.00347EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/09 4:9 p.m.29 views

CVE-2025-32493 WordPress BP Social Connect plugin <= 1.6.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VibeThemes BP Social Connect bp-social-connect allows Stored XSS.This issue affects BP Social Connect: from n/a through = 1.6.2...

5.9CVSS0.00347EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/09 12:0 a.m.8 views

PT-2025-15772 · Vibethemes · Vibethemes Bp Social Connect

Name of the Vulnerable Software and Affected Versions: VibeThemes BP Social Connect versions 1.6.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS attacks. This means that an attacker can inject malicious...

5.9CVSS6.2AI score0.00347EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/04/09 12:0 a.m.7 views

WordPress plugin BP Social Connect 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6.1AI score0.00347EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/04/02 12:0 a.m.17 views

The vulnerability of the web interface of Moxa network device software for models EDF-G1002-BP, EDR-810, EDR-8010, EDR-G9004, EDR-G9010, NAT-102, TN-4900, and OnCell G4302-LTE4 allows a perpetrator to execute arbitrary commands through NTP settings, thereby gaining full control over the device.

The vulnerability of the web interface of Moxa network devices of the EDF-G1002-BP, EDR-810, EDR-8010, EDR-G9004, EDR-G9010, NAT-102, TN-4900, and OnCell G4302-LTE4 series is related to the lack of measures to neutralize specific components. Exploiting this vulnerability allows a malicious actor ...

9.1CVSS5.9AI score0.00531EPSS
SaveExploits0References2Affected Software8
RedhatCVE
RedhatCVE
added 2025/03/14 3:54 p.m.17 views

CVE-2025-28875

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in shanebp BP Email Assign Templates bp-email-assign-templates allows Stored XSS.This issue affects BP Email Assign Templates: from n/a through = 1.6...

5.9CVSS7.2AI score0.00269EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/14 3:46 p.m.14 views

CVE-2025-28874

Authorization Bypass Through User-Controlled Key vulnerability in shanebp BP Email Assign Templates bp-email-assign-templates allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BP Email Assign Templates: from n/a through = 1.7...

6.5CVSS7.2AI score0.00437EPSS
SaveExploits0References1
Rows per page
Query Builder