Lucene search
+L

52 matches found

Vulnrichment
Vulnrichment
•added 2025/09/22 6:23 p.m.•3 views

CVE-2025-58233 WordPress SQL Chart Builder Plugin <= 2.3.7.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Guaven Labs SQL Chart Builder sql-chart-builder allows DOM-Based XSS.This issue affects SQL Chart Builder: from n/a through = 2.3.7.2...

6.5CVSS5.9AI score0.0021EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/22 6:23 p.m.•25 views

CVE-2025-58233

CVE-2025-58233 describes a DOM-based XSS vulnerability in Guaven Labs SQL Chart Builder. Affected: SQL Chart Builder versions up to 2.3.7.2 (no fixed version specified in the documents beyond that). The issue is an input handling problem during web page generation that can lead to Cross-Site Scri...

6.5CVSS5.9AI score0.0021EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/22 6:23 p.m.•19 views

CVE-2025-58233 WordPress SQL Chart Builder Plugin <= 2.3.7.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Guaven Labs SQL Chart Builder sql-chart-builder allows DOM-Based XSS.This issue affects SQL Chart Builder: from n/a through = 2.3.7.2...

6.5CVSS0.0021EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•0 views

CVE-2025-58233: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Guaven Labs SQL Chart Builder sql-chart-builder allows DOM-Based XSS.This issue affects SQL Chart Builder: from n/a through = 2.3.7.2...

6.5CVSS5.8AI score0.0021EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/22 12:00 a.m.•12 views

PT-2025-38898

Name of the Vulnerable Software and Affected Versions Guaven Labs SQL Chart Builder versions through 2.3.7.2 Description A flaw exists in Guaven Labs SQL Chart Builder that allows for DOM-Based Cross-site Scripting XSS. This issue is due to improper neutralization of input during web page...

6.5CVSS6.7AI score0.0021EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/09/22 12:00 a.m.•9 views

WordPress plugin Guaven Labs SQL Chart Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A cross-site scriptin...

6.5CVSS6.4AI score0.0021EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/14 12:00 a.m.•2 views

CVE-2025-54673: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Ays Pro Chartify chart-builder allows Cross Site Request Forgery.This issue affects Chartify: from n/a through = 3.5.3...

4.3CVSS5.8AI score0.00144EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 5:16 a.m.•14 views

CVE-2023-47526

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Chart Builder Team Chartify – WordPress Chart Plugin allows Stored XSS.This issue affects Chartify – WordPress Chart Plugin: from n/a through 2.0.6...

5.9CVSS6.6AI score0.00316EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/03/27 11:15 a.m.•9 views

CVE-2025-30904

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Chartify chart-builder allows Stored XSS.This issue affects Chartify: from n/a through = 3.1.7...

5.9CVSS7.2AI score0.00294EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/02/09 10:21 a.m.•10 views

CVE-2025-25077

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dugbug Easy Chart Builder for WordPress easy-chart-builder allows Stored XSS.This issue affects Easy Chart Builder for WordPress: from n/a through = 1.3...

6.5CVSS7.2AI score0.0028EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/07 10:15 a.m.•10 views

CVE-2025-25077

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dugbug Easy Chart Builder for WordPress easy-chart-builder allows Stored XSS.This issue affects Easy Chart Builder for WordPress: from n/a through = 1.3...

6.5CVSS0.0028EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/07 10:11 a.m.•8 views

CVE-2025-25077 WordPress Easy Chart Builder for WordPress plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dugbug Easy Chart Builder for WordPress easy-chart-builder allows Stored XSS.This issue affects Easy Chart Builder for WordPress: from n/a through = 1.3...

6.5CVSS7.2AI score0.0028EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/07 10:11 a.m.•25 views

CVE-2025-25077 WordPress Easy Chart Builder for WordPress plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dugbug Easy Chart Builder for WordPress easy-chart-builder allows Stored XSS.This issue affects Easy Chart Builder for WordPress: from n/a through = 1.3...

6.5CVSS0.0028EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/07 10:11 a.m.•60 views

CVE-2025-25077

CVE-2025-25077 refers to a Stored XSS in Easy Chart Builder for WordPress (plugin)

6.5CVSS7.2AI score0.0028EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/07 12:00 a.m.•9 views

WordPress plugin Easy Chart Builder for WordPress 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

6.5CVSS8.2AI score0.0028EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/02/07 12:00 a.m.•9 views

PT-2025-5916 · WordPress · Easy Chart Builder For Wordpress

Name of the Vulnerable Software and Affected Versions: Easy Chart Builder for WordPress versions 1.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attack...

6.5CVSS8.8AI score0.0028EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/02/05 8:27 a.m.•19 views

CVE-2024-47347

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Chartify chart-builder allows Reflected XSS.This issue affects Chartify: from n/a through = 2.7.6...

7.1CVSS5.9AI score0.0032EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/02/03 4:12 p.m.•9 views

WordPress Easy Chart Builder for WordPress plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by muhammad yudha in WordPress Plugin Easy Chart Builder for WordPress versions = 1.3...

6.5CVSS5.8AI score0.0028EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
•added 2024/12/12 3:23 a.m.•12 views

CVE-2024-11430 SQL Chart Builder <= 2.3.6 - Authenticated (Contributor+) SQL Injection

The SQL Chart Builder plugin for WordPress is vulnerable to SQL Injection via the 'arg1' arg of the 'gvnschart2' shortcode in all versions up to, and including, 2.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This mak...

6.5CVSS7.3AI score0.00538EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/12/12 3:23 a.m.•51 views

CVE-2024-11430 SQL Chart Builder <= 2.3.6 - Authenticated (Contributor+) SQL Injection

The SQL Chart Builder plugin for WordPress is vulnerable to SQL Injection via the 'arg1' arg of the 'gvnschart2' shortcode in all versions up to, and including, 2.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This mak...

6.5CVSS0.00538EPSS
SaveExploits0References3
Rows per page
Query Builder