Lucene search
+L

497 matches found

Cvelist
Cvelist
added 2024/11/10 9:5 a.m.36 views

CVE-2024-51581 WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicheaddons Restaurant & Cafe Addon for Elementor restaurant-cafe-addon-for-elementor allows Stored XSS.This issue affects Restaurant & Cafe Addon for Elementor: from n/a through = 1.5.6...

6.5CVSS0.00248EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/10 9:5 a.m.18 views

CVE-2024-51581 WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicheaddons Restaurant & Cafe Addon for Elementor restaurant-cafe-addon-for-elementor allows Stored XSS.This issue affects Restaurant & Cafe Addon for Elementor: from n/a through = 1.5.6...

6.5CVSS5.9AI score0.00248EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/10/31 12:0 a.m.15 views

WordPress Restaurant & Cafe Addon for Elementor Plugin <= 1.5.6 is vulnerable to Cross Site Scripting (XSS)

Software Restaurant & Cafe Addon for Elementor Type Plugin Vulnerable versions = 1.5.6 Fixed in 1.5.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51581 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f2df6ca3227e Credits João Pedro S...

6.5CVSS6.3AI score0.00248EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/10/06 1:15 p.m.6 views

CVE-2024-44032

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in NicheAddons Restaurant & Cafe Addon for Elementor allows Stored XSS.This issue affects Restaurant & Cafe Addon for Elementor: from n/a through 1.5.5...

5.4CVSS5.8AI score0.00298EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/06 1:15 p.m.26 views

CVE-2024-44032

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicheaddons Restaurant & Cafe Addon for Elementor restaurant-cafe-addon-for-elementor allows Stored XSS.This issue affects Restaurant & Cafe Addon for Elementor: from n/a through = 1.5.5...

6.5CVSS0.00298EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/06 12:27 p.m.58 views

CVE-2024-44032

CVE-2024-44032 concerns the WordPress plugin Restaurant & Cafe Addon for Elementor. It is a Stored XSS vulnerability caused by Improper Neutralization of Input During Web Page Generation, affecting versions 1.5.5 and earlier. The issue has been fixed in version 1.5.6. Public references from Patch...

6.5CVSS5.9AI score0.00298EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/10/06 12:0 a.m.7 views

PT-2024-30899 · Elementor · Nicheaddons Restaurant & Cafe Addon For Elementor

Name of the Vulnerable Software and Affected Versions: NicheAddons Restaurant & Cafe Addon for Elementor versions 1.5.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS,...

6.5CVSS6.4AI score0.00298EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2024/09/24 12:0 a.m.16 views

WordPress Restaurant & Cafe Addon for Elementor Plugin <= 1.5.5 is vulnerable to Cross Site Scripting (XSS)

Software Restaurant & Cafe Addon for Elementor Type Plugin Vulnerable versions = 1.5.5 Fixed in 1.5.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-44032 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID fe8ab7d9930f Credits João Pedro S...

6.5CVSS6.8AI score0.00298EPSS
SaveExploits0References2Affected Software1
Packet Storm
Packet Storm
added 2024/08/23 12:0 a.m.226 views

CCMS Project 1.0 SQL Injection

============================================================================================================================================= | Title : CCMS Project 1.0 Auth By Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 129.0.1 64 bits |...

7.4AI score
SaveExploits0
CNNVD
CNNVD
added 2024/07/01 12:0 a.m.5 views

hod security breach

hod is an open source library from Cafe Bazaar. A security vulnerability exists in hod version v0.4.14, which originates from the inclusion of prototype contamination via the function request, allowing an attacker to execute arbitrary code or cause a denial of service DoS by injecting arbitrary...

9.8CVSS7.7AI score0.00691EPSS
SaveExploits0References2
OSV
OSV
added 2024/06/25 12:38 p.m.8 views

MAL-2024-2150 Malicious code in down_load_ebook_cafe_com_deus_by_marcelo_bigardi_qc7ed (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
Patchstack
Patchstack
added 2024/06/06 2:35 a.m.5 views

WordPress Clever Addons for Elementor plugin <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple CAFE Widgets vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Multiple CAFE Widgets vulnerability discovered by Francesco Carlucci in WordPress Plugin Clever Addons for Elementor versions = 2.1.9...

6.4CVSS5.8AI score0.00329EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/06/06 2:15 a.m.4 views

CVE-2024-2350

The Clever Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the CAFE Icon, CAFE Team Member, and CAFE Slider widgets in all versions up to, and including, 2.1.9 due to insufficient input sanitization and output escaping. This makes it possible for...

5.4CVSS5.9AI score0.00329EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/06/05 12:0 a.m.9 views

PT-2024-19901 · WordPress · Clever Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Clever Addons for Elementor plugin for WordPress versions up to, and including, 2.1.9 Description: The issue is related to Stored Cross-Site Scripting via the CAFE Icon, CAFE Team Member, and CAFE Slider widgets due to insufficient input...

6.4CVSS6AI score0.00329EPSS
SaveExploits0References9
WPVulnDB
WPVulnDB
added 2024/05/07 12:0 a.m.11 views

Restaurant and Cafe < 1.2.2 - Cross-Site Request Forgery to Notice Dismissal

Description The Restaurant and Cafe theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.1. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to dismiss notices via a forged...

4.3CVSS6.4AI score0.00208EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/05/06 7:15 p.m.15 views

CVE-2024-34379

Cross-Site Request Forgery CSRF vulnerability in Rara Theme Restaurant and Cafe.This issue affects Restaurant and Cafe: from n/a through 1.2.1...

4.3CVSS5.1AI score0.00208EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/05/06 6:19 p.m.22 views

CVE-2024-34379 WordPress Restaurant and Cafe theme <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Rara Theme Restaurant and Cafe.This issue affects Restaurant and Cafe: from n/a through 1.2.1...

4.3CVSS5.3AI score0.00208EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/06 6:19 p.m.14 views

CVE-2024-34379 WordPress Restaurant and Cafe theme <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Rara Theme Restaurant and Cafe.This issue affects Restaurant and Cafe: from n/a through 1.2.1...

4.3CVSS7.2AI score0.00208EPSS
SaveExploits0References1
CVE
CVE
added 2024/05/06 6:19 p.m.57 views

CVE-2024-34379

CVE-2024-34379 is a CSRF flaw in the Rara Theme Restaurant and Cafe for WordPress, affecting versions up to 1.2.1. The connected Red Hat/Wordfence entries confirm the CSRF nature and affected product/version, but provide no patch or remediation details.

4.3CVSS5.2AI score0.00208EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/05/06 12:0 a.m.6 views

PT-2024-25838

Name of the Vulnerable Software and Affected Versions Rara Theme Restaurant and Cafe versions 1.2.1 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

4.3CVSS6.4AI score0.00208EPSS
SaveExploits0References5
Rows per page
Query Builder