Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/11/05 2:13 a.m.•14 views

CVE-2025-11841

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Chart Data attributes in all versions up to, and including, 12.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS5AI score0.00193EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/11/04 4:45 a.m.•20 views

WordPress Greenshift plugin <= 12.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Data Attributes vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Chart Data Attributes vulnerability discovered by Webbernaut in WordPress Plugin Greenshift versions = 12.2.7...

6.4CVSS5.8AI score0.00193EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2025/11/04 3:15 a.m.•12 views

CVE-2025-11841

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Chart Data attributes in all versions up to, and including, 12.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS0.00193EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/11/04 1:50 a.m.•23 views

CVE-2025-11841 Greenshift – animation and page builder blocks <= 12.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Data Attributes

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Chart Data attributes in all versions up to, and including, 12.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS0.00193EPSS
SaveExploits0References2
CVE
CVE
•added 2025/11/04 1:50 a.m.•34 views

CVE-2025-11841

CVE-2025-11841 (Greenshift – animation and page builder blocks) affects Greenshift for WordPress up to and including version 12.2.7. The vulnerability is a stored XSS via Chart Data attributes caused by insufficient input sanitization and output escaping. It requires authenticated access at Contr...

6.4CVSS6.1AI score0.00193EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/04 12:00 a.m.•6 views

CVE-2025-11841: Improper Neutralization of Input During Web Page Generation

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Chart Data attributes in all versions up to, and including, 12.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS6.1AI score0.00193EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/04 12:00 a.m.•23 views

PT-2025-44914

Name of the Vulnerable Software and Affected Versions Greenshift – animation and page builder blocks versions up to and including 12.2.7 Description The Greenshift plugin for WordPress is susceptible to Stored Cross-Site Scripting through the Chart Data attributes. Insufficient input sanitization...

6.4CVSS5.2AI score0.00193EPSS
SaveExploits0References5
Rows per page
Query Builder