Lucene search
+L

126 matches found

CNVD
CNVD
•added 2022/04/13 12:00 a.m.•20 views

WordPress Prize Chaty plugin跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Premio Chaty plugin 2.8.3 and earlier versions contain a cross-site scripting vulnerability that can be exploited by an...

0.8AI score
SaveExploits0Affected Software1
OSV
OSV
•added 2022/04/11 8:15 p.m.•13 views

CVE-2021-36846

Authenticated admin or higher user role Stored Cross-Site Scripting XSS vulnerability in Premio Chaty WordPress plugin = 2.8.3...

4.8CVSS5.8AI score0.00599EPSS
SaveExploits0References2
NVD
NVD
•added 2022/04/11 8:15 p.m.•34 views

CVE-2021-36846

Authenticated admin or higher user role Stored Cross-Site Scripting XSS vulnerability in Premio Chaty WordPress plugin = 2.8.3...

4.8CVSS0.00599EPSS
SaveExploits0References2
Prion
Prion
•added 2022/04/11 8:15 p.m.•29 views

Cross site scripting

Authenticated admin or higher user role Stored Cross-Site Scripting XSS vulnerability in Premio Chaty WordPress plugin = 2.8.3...

3.5CVSS4.9AI score0.00599EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2022/04/11 7:37 p.m.•11 views

CVE-2021-36846 WordPress Chaty plugin <= 2.8.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated admin or higher user role Stored Cross-Site Scripting XSS vulnerability in Premio Chaty WordPress plugin = 2.8.3...

4.8CVSS4.8AI score0.00599EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/04/11 7:37 p.m.•44 views

CVE-2021-36846 WordPress Chaty plugin <= 2.8.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated admin or higher user role Stored Cross-Site Scripting XSS vulnerability in Premio Chaty WordPress plugin = 2.8.3...

4.8CVSS5.1AI score0.00599EPSS
SaveExploits0References2
CVE
CVE
•added 2022/04/11 7:37 p.m.•98 views

CVE-2021-36846

CVE-2021-36846 affects the WordPress Premio Chaty plugin; authenticated users (admin+) can store XSS in plugin settings. Public details cite versions &lt;= 2.8.3 (and OpenVAS reference to

4.8CVSS4.8AI score0.00599EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/11 12:00 a.m.•6 views

CVE-2021-36846: Improper Neutralization of Input During Web Page Generation

Authenticated admin or higher user role Stored Cross-Site Scripting XSS vulnerability in Premio Chaty WordPress plugin = 2.8.3...

4.8CVSS5.5AI score0.00599EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/04/11 12:00 a.m.•5 views

PT-2022-10573

Name of the Vulnerable Software and Affected Versions Premio Chaty WordPress plugin versions 2.8.3 and earlier Description The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin or higher user role can inject malicious script...

4.8CVSS0.00599EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2022/04/11 12:00 a.m.•16 views

WordPress plugin Premio Chaty跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an open source application plugin for WordPress. A security vulnerability exists in the WordPress plug...

4.8CVSS5.1AI score0.00599EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2022/04/08 12:00 a.m.•40 views

WordPress Chaty plugin <= 2.8.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Asif Nawaz Minhas Patchstack Alliance in WordPress Chaty plugin versions = 2.8.3. Solution No patched version is available...

4.8CVSS2.8AI score0.00599EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2022/01/05 12:00 a.m.•60 views

WordPress Chaty Cross-Site Scripting Vulnerability (CNVD-2022-03904)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Chaty versions prior to 2.8.3 and WordPress...

6.1CVSS5.8AI score0.01798EPSS
SaveExploits2References1
OSV
OSV
•added 2022/01/03 1:15 p.m.•18 views

CVE-2021-25016

The Chaty WordPress plugin before 2.8.3 and Chaty Pro WordPress plugin before 2.8.2 do not sanitise and escape the search parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting...

6.1CVSS5.8AI score0.01798EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2022/01/03 1:15 p.m.•12 views

CVE-2021-25016

The Chaty WordPress plugin before 2.8.3 and Chaty Pro WordPress plugin before 2.8.2 do not sanitise and escape the search parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.3AI score0.01798EPSS
SaveExploits2References3
Prion
Prion
•added 2022/01/03 1:15 p.m.•23 views

Cross site scripting

The Chaty WordPress plugin before 2.8.3 and Chaty Pro WordPress plugin before 2.8.2 do not sanitise and escape the search parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting...

4.3CVSS6AI score0.01798EPSS
SaveExploits2References1Affected Software2
Cvelist
Cvelist
•added 2022/01/03 12:49 p.m.•43 views

CVE-2021-25016 Chaty < 2.8.3 - Reflected Cross-Site Scripting

The Chaty WordPress plugin before 2.8.3 and Chaty Pro WordPress plugin before 2.8.2 do not sanitise and escape the search parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting...

6.2AI score0.01798EPSS
SaveExploits2References1
CVE
CVE
•added 2022/01/03 12:49 p.m.•117 views

CVE-2021-25016

CVE-2021-25016 affects the WordPress Chaty plugin (&lt;= 2.8.3) and Chaty Pro (

6.1CVSS6AI score0.01798EPSS
SaveExploits2References1Affected Software2
CNNVD
CNNVD
•added 2022/01/03 12:00 a.m.•23 views

WordPress plugin Chaty 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Chaty versions prior to 2.8.3 and WordPress...

6.1CVSS4.9AI score0.01798EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/03 12:00 a.m.•4 views

CVE-2021-25016: Improper Neutralization of Input During Web Page Generation

The Chaty WordPress plugin before 2.8.3 and Chaty Pro WordPress plugin before 2.8.2 do not sanitise and escape the search parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting...

6.1CVSS5.8AI score0.01798EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
•added 2022/01/03 12:00 a.m.•3 views

PT-2022-9573

Name of the Vulnerable Software and Affected Versions Chaty WordPress plugin versions prior to 2.8.3 Chaty Pro WordPress plugin versions prior to 2.8.2 Description The issue arises from the failure to sanitise and escape the search parameter before outputting it back in the admin dashboard, leadi...

6.1CVSS0.01798EPSS
SaveExploits2References5
Rows per page
Query Builder