Lucene search
+L

12953 matches found

Cvelist
Cvelist
added 2023/05/15 11:36 a.m.34 views

CVE-2023-23683 WordPress White Label Branding for Elementor Page Builder Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ozan Canakli White Label Branding for Elementor Page Builder plugin = 1.0.2 versions...

5.9CVSS5.6AI score0.00392EPSS
SaveExploits0References1
CVE
CVE
added 2023/05/15 11:36 a.m.47 views

CVE-2023-23683

CVE-2023-23683 affects WordPress plugin White Label Branding for Elementor Page Builder (versions

5.9CVSS5.1AI score0.00392EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/05/15 12:00 a.m.6 views

PT-2023-19127 · Unknown · Ozan Canakli White Label Branding For Elementor Page Builder

Name of the Vulnerable Software and Affected Versions: Ozan Canakli White Label Branding for Elementor Page Builder plugin versions prior to 1.0.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin or higher privileges...

5.9CVSS5.4AI score0.00392EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/05/15 12:00 a.m.39 views

Oracle Linux 9 : Image / Builder (ELSA-2023-2204)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2204 advisory. cockpit-composer 45-1.0.1 - Make per page documentation links point to Oracle Linux Orabug: 32013095, Orabug:34398922 45-1 - New upstream release 44-1 ...

7.5CVSS7.3AI score0.05623EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/05/15 12:00 a.m.5 views

WordPress plugin White Label Branding for Elementor Page Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

5.9CVSS6.3AI score0.00392EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/05/13 12:00 a.m.42 views

RHEL 9 : Image Builder (RHSA-2023:2204)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2204 advisory. Image Builder is a service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood...

7.5CVSS7.3AI score0.05623EPSS
SaveExploits1References25
OSV
OSV
added 2023/05/12 3:15 p.m.10 views

CVE-2023-23867

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Gautam Thapar Button Builder – Buttons X plugin = 0.8.6 versions...

5.4CVSS6.7AI score0.00361EPSS
SaveExploits0References1
NVD
NVD
added 2023/05/12 3:15 p.m.27 views

CVE-2023-23867

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Gautam Thapar Button Builder – Buttons X plugin = 0.8.6 versions...

6.5CVSS5.8AI score0.00361EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/12 3:15 p.m.18 views

Cross site scripting

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Gautam Thapar Button Builder – Buttons X plugin = 0.8.6 versions...

4.9CVSS5.2AI score0.00361EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/05/12 2:39 p.m.48 views

CVE-2023-23867

CVE-2023-23867: WordPress Button Builder – Buttons X plugin

6.5CVSS5.5AI score0.00361EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/05/12 2:39 p.m.32 views

CVE-2023-23867 WordPress Button Builder – Buttons X Plugin <= 0.8.6 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Gautam Thapar Button Builder – Buttons X plugin = 0.8.6 versions...

6.5CVSS6AI score0.00361EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/05/12 12:00 a.m.7 views

WordPress Plugin Button Builder – Buttons X 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.5CVSS6.5AI score0.00361EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/05/12 12:00 a.m.12 views

WordPress Plugin Button Builder – Buttons X 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

7.8CVSS7.4AI score0.0022EPSS
SaveExploits0References3
WPVulnDB
WPVulnDB
added 2023/05/12 12:00 a.m.245 views

Elementor Website Builder < 3.13.2 - Missing Authorization

The plugin does not check user capabilities on several functions, allowing authenticated attackers with a low amount of privilege such as Subscribers to perform actions that should only be available to users with higher privileges...

6.8AI score
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2023/05/12 12:00 a.m.8 views

WordPress Elementor Website Builder Plugin <= 3.13.1 is vulnerable to Broken Access Control

Software Elementor Website Builder Type Plugin Vulnerable versions = 3.13.1 Fixed in 3.13.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE N/A Patch priority Medium CVSS severity Medium 4.3 Developer Elementor PSID 95f606d4bd1b Credits N/A Required privilege...

6.8AI score
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2023/05/11 12:00 a.m.9 views

PHPOK 安全漏洞

PHPOK is an enterprise website builder with extended support. A security vulnerability exists in PHPOK v6.3 that stems from the presence of a Remote Code Execution RCE vulnerability...

9.8CVSS8.6AI score0.01192EPSS
SaveExploits0References3
OSV
OSV
added 2023/05/10 2:15 p.m.10 views

CVE-2022-43474

Uncontrolled search path for the DSP Builder software installer before version 22.4 for IntelR FPGAs Pro Edition may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.8AI score0.00169EPSS
SaveExploits0References1
NVD
NVD
added 2023/05/10 2:15 p.m.21 views

CVE-2022-43474

Uncontrolled search path for the DSP Builder software installer before version 22.4 for IntelR FPGAs Pro Edition may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7AI score0.00169EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/10 2:15 p.m.19 views

Privilege escalation

Uncontrolled search path for the DSP Builder software installer before version 22.4 for IntelR FPGAs Pro Edition may allow an authenticated user to potentially enable escalation of privilege via local access...

4.3CVSS7.8AI score0.00169EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/10 1:17 p.m.8 views

CVE-2022-43474

Uncontrolled search path for the DSP Builder software installer before version 22.4 for IntelR FPGAs Pro Edition may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS7.9AI score0.00169EPSS
SaveExploits0References1
Rows per page
Query Builder