Lucene search
+L

1508 matches found

CNNVD
CNNVD
•added 2024/02/29 12:00 a.m.•16 views

WordPress Plugin Logo Slider - Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Logo Slider - Logo Showcas...

8.8CVSS6.7AI score0.00241EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/02/28 12:00 a.m.•19 views

PT-2024-14183 · Unknown · Gs Plugins Logo Slider

Name of the Vulnerable Software and Affected Versions: GS Plugins Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation versions n/a through 3.5.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attack...

8.8CVSS5.4AI score0.00241EPSS
SaveExploits0References6
OSV
OSV
•added 2024/02/10 8:15 a.m.•16 views

CVE-2024-24801

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LogicHunt OWL Carousel – WordPress Owl Carousel Slider allows Stored XSS.This issue affects OWL Carousel – WordPress Owl Carousel Slider: from n/a through 1.4.0...

5.4CVSS7.3AI score0.00333EPSS
SaveExploits0References1
NVD
NVD
•added 2024/02/10 8:15 a.m.•36 views

CVE-2024-24801

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LogicHunt OWL Carousel – WordPress Owl Carousel Slider allows Stored XSS.This issue affects OWL Carousel – WordPress Owl Carousel Slider: from n/a through 1.4.0...

6.5CVSS6.4AI score0.00333EPSS
SaveExploits0References1
Prion
Prion
•added 2024/02/10 8:15 a.m.•29 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LogicHunt OWL Carousel – WordPress Owl Carousel Slider allows Stored XSS.This issue affects OWL Carousel – WordPress Owl Carousel Slider: from n/a through 1.4.0...

4.9CVSS7.2AI score0.00333EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/02/10 7:53 a.m.•24 views

CVE-2024-24801 WordPress OWL Carousel Plugin <= 1.4.0 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LogicHunt OWL Carousel – WordPress Owl Carousel Slider allows Stored XSS.This issue affects OWL Carousel – WordPress Owl Carousel Slider: from n/a through 1.4.0...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/02/10 7:53 a.m.•51 views

CVE-2024-24801 WordPress OWL Carousel Plugin <= 1.4.0 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LogicHunt OWL Carousel – WordPress Owl Carousel Slider allows Stored XSS.This issue affects OWL Carousel – WordPress Owl Carousel Slider: from n/a through 1.4.0...

6.5CVSS6.6AI score0.00333EPSS
SaveExploits0References1
CVE
CVE
•added 2024/02/10 7:53 a.m.•117 views

CVE-2024-24801

CVE-2024-24801 is a Cross-Site Scripting (Stored XSS) vulnerability in the WordPress Owl Carousel Slider (OWL Carousel) plugin by LogicHunt, affecting version ranges up to 1.4.0. The root cause involves improper neutralization of user input during web page generation. Impact is stored XSS within ...

6.5CVSS6.7AI score0.00333EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2024/02/10 12:00 a.m.•21 views

WordPress Plugin OWL Carousel Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.5CVSS8.2AI score0.00333EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/02/10 12:00 a.m.•13 views

PT-2024-20570 · WordPress · Owl Carousel

Name of the Vulnerable Software and Affected Versions: OWL Carousel – WordPress Owl Carousel Slider versions 1.4.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in the...

6.5CVSS6AI score0.00333EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2024/02/10 12:00 a.m.•15 views

PT-2024-14152 · Unknown · Custom Post Carousels With Owl

Name of the Vulnerable Software and Affected Versions: Custom Post Carousels with Owl versions 1.4.6 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means that an attacker can inject...

6.5CVSS6AI score0.00328EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/10 12:00 a.m.•6 views

CVE-2024-24801: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LogicHunt OWL Carousel – WordPress Owl Carousel Slider allows Stored XSS.This issue affects OWL Carousel – WordPress Owl Carousel Slider: from n/a through 1.4.0...

6.5CVSS5.8AI score0.00333EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
•added 2024/02/05 12:00 a.m.•20 views

OWL Carousel <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The OWL Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject...

4.9CVSS5.9AI score0.00333EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/01/31 12:00 a.m.•25 views

WordPress OWL Carousel Plugin <= 1.4.0 is vulnerable to Cross Site Scripting (XSS)

Software OWL Carousel Type Plugin Vulnerable versions = 1.4.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-24801 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 615e32c78c36 Credits resecured.io Required privilege Contributor...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2024/01/12 12:00 a.m.•23 views

CPT Bootstrap Carousel <= 1.12 - Reflected Cross-Site Scripting

Description The CPT Bootstrap Carousel plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

7.1CVSS6.3AI score0.0033EPSS
SaveExploits0References1
Prion
Prion
•added 2024/01/08 9:15 p.m.•34 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Phil Ewels CPT Bootstrap Carousel allows Reflected XSS.This issue affects CPT Bootstrap Carousel: from n/a through 1.12...

5.8CVSS7.1AI score0.0033EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/08 8:30 p.m.•6 views

CVE-2023-52196 WordPress CPT Bootstrap Carousel Plugin <= 1.12 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Phil Ewels CPT Bootstrap Carousel allows Reflected XSS.This issue affects CPT Bootstrap Carousel: from n/a through 1.12...

7.1CVSS9.6AI score0.0033EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/01/08 8:30 p.m.•48 views

CVE-2023-52196 WordPress CPT Bootstrap Carousel Plugin <= 1.12 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Phil Ewels CPT Bootstrap Carousel allows Reflected XSS.This issue affects CPT Bootstrap Carousel: from n/a through 1.12...

7.1CVSS7.2AI score0.0033EPSS
SaveExploits0References1
CVE
CVE
•added 2024/01/08 8:30 p.m.•86 views

CVE-2023-52196

CVE-2023-52196 affects WordPress CPT Bootstrap Carousel plugin

7.1CVSS7AI score0.0033EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/01/08 8:30 p.m.•17 views

CVE-2023-52196 WordPress CPT Bootstrap Carousel Plugin <= 1.12 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Phil Ewels CPT Bootstrap Carousel allows Reflected XSS.This issue affects CPT Bootstrap Carousel: from n/a through 1.12...

7.1CVSS6.9AI score
SaveExploits0References4
Rows per page
Query Builder