Lucene search
+L

933 matches found

CNNVD
CNNVD
•added 2021/10/04 12:00 a.m.•21 views

Maccms 跨站脚本漏洞

Maccms is a PHP-based content management system CMS for film and television. A cross-site scripting vulnerability exists in Mccms10, which stems from the fact that the nickname in the editing function under the Member module of the product fails to properly validate user input data. An attacker c...

5.4CVSS5.5AI score0.0052EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/10/04 12:00 a.m.•17 views

WordPress CM Tooltip Glossary插件跨站脚本漏洞

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL.A cross-site scripting vulnerability exists in the WordPress plugin CM Tooltip Glossary, which stems fro...

5.4CVSS5.4AI score0.00624EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2021/09/29 12:00 a.m.•19 views

UCMS 跨站脚本漏洞

UCMS is a content management system written in PHP. A security vulnerability exists in UCMS, which originates from a stored cross-site scripting XSS vulnerability in ucms index.php. An attacker can exploit this vulnerability to execute client-side code...

5.4CVSS5.6AI score0.00503EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/09/29 12:00 a.m.•49 views

PortlandLabs Concrete CMS Cross-Site Scripting Vulnerability (CNVD-2021-76088)

PortlandLabs Concrete Cms is a team-oriented open source content management system for the United States PortlandLabs . A cross-site scripting vulnerability exists in PortlandLabs Concrete CMS that stems from the failure of the website field of the product's podcast comment feature to properly...

6.1CVSS6.3AI score0.00651EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/09/27 12:00 a.m.•20 views

WordPress 插件 跨站脚本漏洞

WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the WordPress plugin TranslatePress, which stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute...

4.8CVSS5.1AI score0.05432EPSS
SaveExploits5References5
CNNVD
CNNVD
•added 2021/09/16 12:00 a.m.•14 views

Ec-cube 跨站脚本漏洞

Ec-cube is an open source e-commerce system from the Japanese company Ec-cube. EC-CUBE suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute client-side code...

6.1CVSS6.1AI score0.00773EPSS
SaveExploits0References4
CNVD
CNVD
•added 2021/09/15 12:00 a.m.•44 views

IBM Financial Transaction Manager Cross-Site Scripting Vulnerability (CNVD-2021-71255)

IBM Financial Transaction Manager is a financial transaction manager from IBM Corporation. A cross-site scripting vulnerability exists in IBM Financial Transaction Manager, which stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the...

5.4CVSS3.6AI score0.00495EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/09/13 12:00 a.m.•24 views

WordPress 插件跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports personal blog sites on servers running PHP and MySQL. A security vulnerability exists in the WordPress plugin WP Courses LMS, which stems from the WP Courses LMS...

4.8CVSS5.5AI score0.00617EPSS
SaveExploits2References2
CNVD
CNVD
•added 2021/09/11 12:00 a.m.•36 views

WordPress plugin cross-site scripting vulnerability (CNVD-2021-100233)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . The WordPress Post Title Counter plugin suffers from a...

6.1CVSS6.2AI score0.00895EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2021/09/10 12:00 a.m.•20 views

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . The WordPress Post Title Counter plugin suffers from a...

6.1CVSS5.4AI score0.00895EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2021/09/10 12:00 a.m.•15 views

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists i...

6.1CVSS6.1AI score0.00938EPSS
SaveExploits1References4
Huntr
Huntr
•added 2021/09/09 1:17 p.m.•16 views

Cross-site Scripting (XSS) - Reflected in universaloj/uoj-system

✍️ Description Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application. XSS occurs when a web application makes use of unvalidated or unencoded user input within the output it generates. The...

2.5AI score
SaveExploits0
Huntr
Huntr
•added 2021/09/09 7:58 a.m.•21 views

Cross-site Scripting (XSS) - Reflected in vfleaking/uoj

✍️ Description Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application. XSS occurs when a web application makes use of unvalidated or unencoded user input within the output it generates. The...

2.2AI score
SaveExploits0References1
Huntr
Huntr
•added 2021/09/09 7:48 a.m.•13 views

Cross-site Scripting (XSS) - Reflected in podcastgenerator/podcastgenerator

✍️ Description Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application. XSS occurs when a web application makes use of unvalidated or unencoded user input within the output it generates. The...

2.2AI score
SaveExploits0References1
Huntr
Huntr
•added 2021/09/09 7:28 a.m.•12 views

Cross-site Scripting (XSS) - Reflected in tildeclub/site

✍️ Description Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application. XSS occurs when a web application makes use of unvalidated or unencoded user input within the output it generates. The...

2.1AI score
SaveExploits0References1
Huntr
Huntr
•added 2021/09/08 4:01 p.m.•27 views

Cross-site Scripting (XSS) - Reflected in th3-822/rapidleech

✍️ Description Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application. XSS occurs when a web application makes use of unvalidated or unencoded user input within the output it generates. The...

2.4AI score
SaveExploits0References1
CNVD
CNVD
•added 2021/09/08 12:00 a.m.•66 views

WordPress cross-site scripting vulnerability

WordPress is the WordPress Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.A cross-site scripting vulnerability exists in Wordpress Plugin Highlight, which stems from the...

5.4CVSS1.1AI score0.00624EPSS
SaveExploits2References1
Huntr
Huntr
•added 2021/09/07 10:11 a.m.•24 views

Cross-site Scripting (XSS) - Reflected in andrewpaglusch/flashpaper

✍️ Description Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application. XSS occurs when a web application makes use of unvalidated or unencoded user input within the output it generates. The...

2.3AI score
SaveExploits0References1
Huntr
Huntr
•added 2021/09/07 2:12 a.m.•12 views

Cross-site Scripting (XSS) - Reflected in kasuganosoras/pigeon

✍️ Description Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application. XSS occurs when a web application makes use of unvalidated or unencoded user input within the output it generates. The...

2.2AI score
SaveExploits0References1
Huntr
Huntr
•added 2021/09/07 1:24 a.m.•9 views

Cross-site Scripting (XSS) - Reflected in phoronix-test-suite/phoronix-test-suite

✍️ Description Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application. XSS occurs when a web application makes use of unvalidated or unencoded user input within the output it generates. The...

2.3AI score
SaveExploits0References1
Rows per page
Query Builder