Lucene search
+L

12922 matches found

NVD
NVD
added 2023/12/29 11:15 a.m.24 views

CVE-2023-51396

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brizy.Io Brizy – Page Builder allows Stored XSS.This issue affects Brizy – Page Builder: from n/a through 2.4.29...

6.5CVSS0.00321EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/29 11:15 a.m.8 views

CVE-2023-51396

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brizy.Io Brizy – Page Builder allows Stored XSS.This issue affects Brizy – Page Builder: from n/a through 2.4.29...

5.4CVSS5.8AI score0.00321EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/12/29 10:27 a.m.38 views

CVE-2023-51396 WordPress Brizy – Page Builder Plugin <= 2.4.29 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brizy.Io Brizy – Page Builder allows Stored XSS.This issue affects Brizy – Page Builder: from n/a through 2.4.29...

6.5CVSS6.6AI score0.00321EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/29 10:27 a.m.63 views

CVE-2023-51396

The CVE-2023-51396 entry concerns Brizy – Page Builder (WordPress plugin) with stored XSS in the Brizy shortcode output. Affected versions are Brizy – Page Builder up to and including 2.4.29; the vulnerability stems from improper input neutralization during web page generation. Impact, as describ...

6.5CVSS5.7AI score0.00321EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/12/29 10:15 a.m.7 views

CVE-2023-32517

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in PluginOps MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder.This issue affects MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder: from n/a through 4.0.9.3...

6.1CVSS7.3AI score0.00351EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/29 10:15 a.m.27 views

Open redirect

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in PluginOps MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder.This issue affects MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder: from n/a through 4.0.9.3...

5.8CVSS7.1AI score0.00351EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/12/29 10:05 a.m.74 views

CVE-2023-32517

CVE-2023-32517 is an Open Redirect vulnerability in PluginOps MailChimp Subscribe Form, Optin Builder, PopUp Builder, and Form Builder for WordPress. Affected versions are up to and including 4.0.9.3 (vendor/product: MailChimp Subscribe Forms plugins). The root cause is an untrusted URL redirecti...

6.1CVSS7AI score0.00351EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/12/29 12:00 a.m.15 views

PT-2023-31798 · Unknown · Rise Blocks

Name of the Vulnerable Software and Affected Versions: Rise Blocks – A Complete Gutenberg Page Builder versions 3.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actio...

8.8CVSS8.8AI score0.00216EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/12/29 12:00 a.m.14 views

PT-2023-31703 · WordPress · Beaver Builder

Name of the Vulnerable Software and Affected Versions: Beaver Builder – WordPress Page Builder versions through 2.7.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS. This affects the...

6.5CVSS6.1AI score0.00321EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/12/29 12:00 a.m.14 views

PT-2023-31707 · Unknown · Upsolution Impreza

Name of the Vulnerable Software and Affected Versions: UpSolution Impreza – WordPress Website and WooCommerce Builder versions n/a through 8.17.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows...

7.1CVSS6.5AI score0.00351EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2023/12/29 12:00 a.m.13 views

WordPress Plugin Beaver Builder Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6AI score0.00321EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/12/29 12:00 a.m.11 views

PT-2023-23850 · Pluginops · Form Builder +3

Name of the Vulnerable Software and Affected Versions: PluginOps MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder versions 4.0.9.3 and earlier Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability. This...

6.1CVSS6.6AI score0.00351EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/12/29 12:00 a.m.16 views

PT-2023-31805 · Unknown · Brizy – Page Builder

Name of the Vulnerable Software and Affected Versions: Brizy – Page Builder versions 2.4.29 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

6.5CVSS6.8AI score0.00321EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2023/12/29 12:00 a.m.10 views

WordPress Plugin MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder Input Validation Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin MailChimp Subscribe Form,...

6.1CVSS6.6AI score0.00351EPSS
SaveExploits0References2
OSV
OSV
added 2023/12/28 8:16 p.m.10 views

CVE-2023-50838

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Basix NEX-Forms – Ultimate Form Builder – Contact forms and much more.This issue affects NEX-Forms – Ultimate Form Builder – Contact forms and much more: from n/a through 8.5.5...

7.2CVSS7.3AI score0.00574EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/28 8:16 p.m.28 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Basix NEX-Forms – Ultimate Form Builder – Contact forms and much more.This issue affects NEX-Forms – Ultimate Form Builder – Contact forms and much more: from n/a through 8.5.5...

5.8CVSS8AI score0.00574EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/12/28 8:04 p.m.71 views

CVE-2023-50838

CVE-2023-50838 corresponds to an SQL Injection vulnerability in NEX-Forms – Ultimate Form Builder for WordPress. The issue affects the NEX-Forms – Ultimate Form Builder – Contact forms and much more plugin, up to version 8.5.5. According to sources, this was an authenticated issue requiring at le...

7.6CVSS7.8AI score0.00574EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2023/12/28 11:15 a.m.30 views

CVE-2023-50856

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in FunnelKit Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels & Maximize Profits.This issue affects Funnel Builder for WordPress by FunnelKit –...

7.6CVSS0.00541EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/28 11:15 a.m.8 views

CVE-2023-50856

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in FunnelKit Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels & Maximize Profits.This issue affects Funnel Builder for WordPress by FunnelKit –...

7.2CVSS7.3AI score0.00541EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/28 11:15 a.m.25 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in FunnelKit Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels & Maximize Profits.This issue affects Funnel Builder for WordPress by FunnelKit –...

5.8CVSS8AI score0.00541EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder