Lucene search
+L

916 matches found

CNVD
CNVD
•added 2021/12/30 12:00 a.m.•52 views

livehelperchat cross-site scripting vulnerability (CNVD-2022-01685)

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. An attacker can exploi...

6.1CVSS6AI score0.00785EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2021/12/29 12:00 a.m.•14 views

livehelperchat 跨站脚本漏洞

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. An attacker can exploi...

6.6CVSS5.4AI score0.00531EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/12/29 12:00 a.m.•13 views

livehelperchat 跨站脚本漏洞

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. An attacker can exploi...

6.1CVSS5.4AI score0.00785EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/12/29 12:00 a.m.•59 views

Qibosoft Cross-Site Scripting Vulnerability

Qibosoft qibosoft is a content management system CMS from Qibosoft, China. qibosoft has a cross-site scripting vulnerability that originates in the /admin/index.php?lfj=friendlink & action=add link of the admin component of the product. The vulnerability is caused by the...

5.4CVSS3.1AI score0.00602EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/12/21 12:00 a.m.•50 views

livehelperchat cross-site scripting vulnerability (CNVD-2022-01692)

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from livehelperchat's susceptibility to input mismatches during web page generation "cross-site scripting"...

7.3CVSS5.2AI score0.00634EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/12/20 12:00 a.m.•17 views

WordPress plugin Wappointment cross-site scripting vulnerability

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Wappointment. The vulnerability...

1.7AI score
SaveExploits0References1
CNNVD
CNNVD
•added 2021/12/17 12:00 a.m.•16 views

Nordaaker Convos 跨站脚本漏洞

Nordaaker Convos is an open source web browser-based multi-user chat application from Nordaaker, Norway. A cross-site scripting vulnerability exists in Convos-Chat that stems from a stored cross-site scripting XSS issue in Convos-Chat prior to 6.32. An attacker could exploit the vulnerability to...

5.4CVSS5.6AI score0.0073EPSS
SaveExploits1References4
CNVD
CNVD
•added 2021/12/12 12:00 a.m.•59 views

KNIME Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in Knime, the Swiss company's enterprise software for putting data science workflows into production. knime stems from the lack of proper validation of client-side data by the WEB application, which can be exploited by attackers to execute client-side...

8.8CVSS5.1AI score0.00759EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/12/07 12:00 a.m.•52 views

Kentico Cross-Site Scripting Vulnerability (CNVD-2022-06913)

Kentico is an ASP.NET-based content management system CMS from Kentico, Inc. A security vulnerability exists in Kentico Xperience CMS, which stems from the fact that Kentico Xperience CMS version 13.0 13.0.43 is prone to a persistent cross-site scripting XSS vulnerability also known as stored or...

6.8CVSS3.8AI score0.00563EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/12/03 12:00 a.m.•41 views

WordPress Cross-Site Scripting Vulnerability (CNVD-2021-100246)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in Wordpress Plugin Events Manager, which stems from the...

6.1CVSS6.3AI score0.00905EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/12/01 12:00 a.m.•45 views

Acronis Cyber Protect 15 Cross-Site Scripting Vulnerability

Acronis Cyber Protect is an application. providing unified protection for your network by integrating backup, disaster recovery, artificial intelligence-based malware protection, remote assistance and security into a single, reliable tool.Acronis Cyber Protect 15 suffers from a cross-site scripti...

5.4CVSS3.3AI score0.00466EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/12/01 12:00 a.m.•16 views

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in Wordpress Plugin Events Manager, which stems from the...

6.1CVSS5.6AI score0.00905EPSS
SaveExploits1References3
CNVD
CNVD
•added 2021/12/01 12:00 a.m.•59 views

Waimai Super Cms Cross-Site Scripting Vulnerability (CNVD-2022-02739)

Waimai Super Cms is a takeaway ordering system. A cross-site scripting vulnerability exists in waimai Super Cms, which originates from the product's /admin.php?&m=Public&a=login link failing to properly process input data. An attacker could cause client-side code execution through this...

6.1CVSS2.6AI score0.00662EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/12/01 12:00 a.m.•55 views

Acronis Cyber Protect 15 Cross-Site Scripting Vulnerability (CNVD-2021-100276)

Acronis Cyber Protect is an application. Provides unified protection for your network by integrating backup, disaster recovery, artificial intelligence-based malware protection, remote assistance and security into a single, reliable tool. Acronis Cyber Protect 15 suffers from a cross-site scripti...

6.1CVSS3.1AI score0.00581EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/11/29 12:00 a.m.•57 views

WordPress Floating Social Media Icon plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Floating Social Media Icon plugin has a...

4.8CVSS2AI score0.00573EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/11/29 12:00 a.m.•13 views

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress GenerateBlocks plugin that stems from a...

5.4CVSS5.6AI score0.00624EPSS
SaveExploits2References2
CNVD
CNVD
•added 2021/11/26 12:00 a.m.•16 views

WordPress WP Sitemap Page Cross-Site Scripting Vulnerability

WordPress is a set of PHP language development blog platform. WP Sitemap Page is a WordPress plugin. A cross-site scripting vulnerability exists in WordPress WP Sitemap Page. The vulnerability stems from the lack of proper validation of client-side data in the web application. An attacker can...

6.5AI score
SaveExploits0References1
CNVD
CNVD
•added 2021/11/24 12:00 a.m.•94 views

Snipe-IT Cross-Site Scripting Vulnerability (CNVD-2022-19842)

Snipe-IT is an open source IT asset/license management system. Snipe-IT has a cross-site scripting vulnerability that stems from the product's web generation page not validating the input data, which could be exploited by an attacker to cause client-side code execution...

8CVSS2.8AI score0.00755EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/11/24 12:00 a.m.•85 views

JetBrains YouTrack Cross-Site Scripting Vulnerability

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software has features such as bug tracking, creating workflows and monitoring project progress. A cross-site scripting vulnerability exists in JetBrains YouTrack, which stems from...

3.5CVSS1.7AI score0.00655EPSS
SaveExploits0Affected Software2
CNVD
CNVD
•added 2021/11/22 12:00 a.m.•95 views

CKEditor cross-site scripting vulnerability (CNVD-2021-92475)

CKEditor is an open source, web-based text editor. CKEditor suffers from a cross-site scripting vulnerability, which stems from the product's failure to effectively filter special characters in input data. An attacker can execute client-side code through this vulnerability...

8.2CVSS6.2AI score0.01573EPSS
SaveExploits0References1
Rows per page
Query Builder