Lucene search
K

48 matches found

Patchstack
Patchstack
added 2024/04/30 12:0 a.m.10 views

WordPress Breakdance Plugin <= 1.7.0 is vulnerable to Cross Site Scripting (XSS)

Software Breakdance Type Plugin Vulnerable versions = 1.7.0 Fixed in 1.7.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-6854 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0b7ea50f2b37 Credits Francesco Carlucci Required privilege...

6.4CVSS6.6AI score0.00324EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2024/04/03 12:15 p.m.21 views

CVE-2024-31390

: Improper Control of Generation of Code 'Code Injection' vulnerability in Soflyy Breakdance allows : Code Injection.This issue affects Breakdance: from n/a through 1.7.2...

9.9CVSS9.7AI score0.00895EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/04/03 11:39 a.m.26 views

CVE-2024-31390 WordPress Breakdance plugin <= 1.7.2 - Authenticated Remote Code Execution (RCE) vulnerability

: Improper Control of Generation of Code 'Code Injection' vulnerability in Soflyy Breakdance allows : Code Injection.This issue affects Breakdance: from n/a through 1.7.2...

9.9CVSS9.8AI score0.00895EPSS
Exploits0References4
CVE
CVE
added 2024/04/03 11:39 a.m.130 views

CVE-2024-31390

The CVE-2024-31390 entry concerns the WordPress Breakdance plugin (versions &lt;= 1.7.2). The vulnerability is an Authenticated Remote Code Execution (RCE) via code injection, caused by an improper control of code generation. Impact is described as remote code execution with, per CVSS data, high ...

9.9CVSS5.2AI score0.00895EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2024/04/03 11:39 a.m.13 views

CVE-2024-31390 WordPress Breakdance plugin <= 1.7.2 - Authenticated Remote Code Execution (RCE) vulnerability

: Improper Control of Generation of Code 'Code Injection' vulnerability in Soflyy Breakdance allows : Code Injection.This issue affects Breakdance: from n/a through 1.7.2...

9.9CVSS5.2AI score0.00895EPSS
Exploits0References4
Patchstack
Patchstack
added 2024/04/03 9:46 a.m.4 views

WordPress Breakdance plugin <= 1.7.2 - Authenticated Remote Code Execution (RCE) vulnerability

Authenticated Remote Code Execution RCE vulnerability discovered by Snicco in WordPress Plugin Breakdance versions = 1.7.2...

9.9CVSS7.5AI score0.00895EPSS
Exploits0References3Affected Software1
Patchstack
Patchstack
added 2024/04/03 12:0 a.m.10 views

WordPress Breakdance Plugin <= 1.7.2 is vulnerable to Remote Code Execution (RCE)

Software Breakdance Type Plugin Vulnerable versions = 1.7.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Remote Code Execution RCE CVE CVE-2024-31390 Patch priority Medium CVSS severity Medium 9.9 Developer Claim ownership PSID 353d66dd1bd4 Credits Snicco Required privilege Breakdance...

9.9CVSS7.3AI score0.00895EPSS
Exploits0References4Affected Software1
CNNVD
CNNVD
added 2024/04/03 12:0 a.m.6 views

WordPress Plugin Breakdance 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

9.9CVSS7.3AI score0.00895EPSS
Exploits0References5
Rows per page
Query Builder