Lucene search
K

868 matches found

CNVD
CNVD
added 2019/09/19 12:0 a.m.5 views

Zulip server cross-site scripting vulnerability (CNVD-2021-10499)

Zulip server is an open source team chat application from the American company Zulip. A cross-site scripting vulnerability exists in Zulip server versions prior to 2.0.5. The vulnerability stems from the WEB application's lack of proper validation of client-side data. An attacker can exploit this...

5.4CVSS6.1AI score0.00254EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/18 12:0 a.m.1 views

SPIP cross-site scripting vulnerability (CNVD-2019-32493)

SPIP is a Web-based content publishing system. The system is primarily used for online collaboration. A cross-site scripting vulnerability exists in SPIP versions prior to 3.1.11 and 3.2.2 prior to 3.2.5, which can be exploited by an attacker to execute client-side code...

6.1CVSS8.4AI score0.00645EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/18 12:0 a.m.3 views

Pinfinity theme for WordPress cross-site scripting vulnerability

Pinfinity theme for WordPress is a multipurpose theme plugin for WordPress. Pinfinity theme for WordPress suffers from a cross-site scripting vulnerability. An attacker can exploit this vulnerability to execute client-side code...

6.1CVSS6.3AI score0.0021EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/18 12:0 a.m.1 views

WordPress postman-smtp plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. postman-smtp is an email plugin used in it. A cross-site scripting vulnerability exists in the WordPress postman-smtp plugin. An...

6.1CVSS6.3AI score0.0021EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/17 12:0 a.m.2 views

OpenEMR Cross-Site Scripting Vulnerability (CNVD-2019-32189)

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A cross-site scripting vulnerability exists in OpenEMR 5.0.1-6, which can be exploited by an attacker to execute client-side code...

6.1CVSS6.4AI score0.38788EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/17 12:0 a.m.1 views

WordPress magic-fields plugin cross-site scripting vulnerability (CNVD-2019-32383)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. magic-fields is a web form field customization plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

6.1CVSS6.3AI score0.00293EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/17 12:0 a.m.2 views

WordPress podlove-podcasting-plugin-for-wordpress plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. podlove-podcasting-plugin-for-wordpress is a plugin for video sites used in it. A cross-site scripting vulnerability exists in...

6.1CVSS6.3AI score0.0026EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/12 12:0 a.m.6 views

WordPress Cross-Site Scripting Vulnerability (CNVD-2019-31833)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress has a cross-site scripting vulnerability that can be exploited by attackers to execute client-side...

6.1CVSS6.3AI score0.02377EPSS
Exploits2References1
CNVD
CNVD
added 2019/09/12 12:0 a.m.1 views

WordPress Cross-Site Scripting Vulnerability (CNVD-2019-31836)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress has a cross-site scripting vulnerability that can be exploited by attackers to execute client-side...

6.1CVSS6.3AI score0.04685EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/12 12:0 a.m.2 views

WordPress cf7-invisible-recaptcha plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. cf7-invisible-recaptcha is an anti-spam plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

6.1CVSS6.3AI score0.0021EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/12 12:0 a.m.2 views

WordPress Cross-Site Scripting Vulnerability (CNVD-2019-31834)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress has a cross-site scripting vulnerability that can be exploited by attackers to execute client-side...

6.1CVSS6.3AI score0.02449EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/12 12:0 a.m.5 views

WordPress Cross-Site Scripting Vulnerability (CNVD-2019-31831)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress has a cross-site scripting vulnerability that can be exploited by attackers to execute client-side...

5.4CVSS6.3AI score0.04337EPSS
Exploits3References1
CNVD
CNVD
added 2019/09/12 12:0 a.m.2 views

WordPress Cross-Site Scripting Vulnerability (CNVD-2019-31830)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress has a cross-site scripting vulnerability that can be exploited by attackers to execute client-side...

6.1CVSS6.3AI score0.02575EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/09 12:0 a.m.2 views

Mautic cross-site scripting vulnerability (CNVD-2019-31196)

Mautic is an open source marketing automation software. The software monitors and manages websites, sends emails and manages customer resources. A cross-site scripting vulnerability exists in Mautic version 2.13.1, which can be exploited by an attacker to execute client-side code...

6.1CVSS6.5AI score0.0024EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/05 12:0 a.m.3 views

WordPress CarSpot theme cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.CarSpot theme is a plugin used in one of the car sales website themes. A cross-site scripting vulnerability exists in...

5.4CVSS6.2AI score0.00162EPSS
Exploits2References1
CNVD
CNVD
added 2019/09/03 12:0 a.m.1 views

WordPress sharebar plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. sharebar is a plugin used to add social sharing buttons to blogs. A cross-site scripting vulnerability exists in the WordPress shareba...

6.1CVSS6.3AI score0.0019EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/03 12:0 a.m.3 views

WordPress updraftplus plugin cross-site scripting vulnerability (CNVD-2019-30397)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. updraftplus is a WordPress backup, restore, and clone plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

6.1CVSS6.3AI score0.0021EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/03 12:0 a.m.1 views

WordPress redirection plugin cross-site scripting vulnerability (CNVD-2019-30388)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. redirection is a redirection management plugin used in it. A cross-site scripting vulnerability exists in the WordPress redirection...

6.1CVSS6.3AI score0.0019EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/03 12:0 a.m.3 views

WordPress akismet plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. akismet is a spam filtering plugin used in it. A cross-site scripting vulnerability exists in the WordPress akismet plugin. An attacke...

6.1CVSS6.3AI score0.00207EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/03 12:0 a.m.1 views

WordPress wp-vipergb plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. wp-vipergb is a message board plugin used in it. A cross-site scripting vulnerability exists in the WordPress wp-viper...

6.1CVSS6.3AI score0.0019EPSS
Exploits0References1
Rows per page
Query Builder