Lucene search
+L

6599 matches found

CNVD
CNVD
•added 2019/09/03 12:00 a.m.•19 views

WordPress gigpress plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. gigpress is used in one of the program listings to add and manage plug-ins. A cross-site scripting vulnerability exists in the...

4.8CVSS6.3AI score0.00694EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/09/03 12:00 a.m.•22 views

WordPress Jetpack plugin cross-site scripting vulnerability (CNVD-2019-30395)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Jetpack is one of the WordPress site security management tools used in it. A cross-site scripting vulnerability exists in the WordPress...

6.1CVSS6.2AI score0.0095EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/09/03 12:00 a.m.•15 views

WordPress my-calendar plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. my-calendar is a calendar customization plugin that is used in it. A cross-site scripting vulnerability exists in the WordPress...

6.1CVSS6.3AI score0.02192EPSS
SaveExploits2References1
CNVD
CNVD
•added 2019/09/03 12:00 a.m.•35 views

WordPress iThemes Exchange Invoices Add-on Cross-Site Scripting Vulnerability

iThemes Exchange for WordPress is a plugin for creating e-commerce websites using the WordPress content management system. iThemes Exchange for WordPress is one of the shopping invoices plugin. A cross-site scripting vulnerability exists in WordPress iThemes Exchange Invoices Add-on. An attacker...

6.1CVSS6.2AI score0.0095EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/09/03 12:00 a.m.•26 views

WordPress redirection plugin cross-site scripting vulnerability (CNVD-2019-30388)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. redirection is a redirection management plugin used in it. A cross-site scripting vulnerability exists in the WordPress redirection...

6.1CVSS6.3AI score0.00923EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/09/03 12:00 a.m.•16 views

Knowage Cross-Site Scripting Vulnerability

Knowage is an open source suite for modern business analytics on traditional resources and big data systems from Knowage Italy. A cross-site scripting vulnerability exists in Knowage 6.1.1 and earlier versions. The vulnerability stems from a lack of proper validation of client-side data by the WE...

6.1CVSS6.3AI score0.00943EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/09/02 12:00 a.m.•20 views

WordPress icegram plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. icegram is a subscription plugin used in it. A cross-site scripting vulnerability exists in WordPress icegram plugin versions prior to...

5.4CVSS6.2AI score0.01018EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/09/02 12:00 a.m.•26 views

Ping Identity Agentless Integration Kit Cross-Site Scripting Vulnerability

Ping Identity Agentless Integration Kit is an agentless authentication development kit from Ping Identity. A cross-site scripting vulnerability exists in Ping Identity Agentless Integration Kit versions prior to 1.5. The vulnerability stems from the lack of proper validation of client-side data b...

6.1CVSS6.5AI score0.01582EPSS
SaveExploits2References1
NVD
NVD
•added 2019/08/29 3:15 p.m.•32 views

CVE-2019-4133

IBM Cloud Automation Manager 3.1.2 could allow a malicious user on the client side with access to client computer to run a custom script. IBM X-Force ID: 158278...

5.2CVSS4.9AI score0.0032EPSS
SaveExploits0References2
Prion
Prion
•added 2019/08/29 3:15 p.m.•25 views

Design/Logic Flaw

IBM Cloud Automation Manager 3.1.2 could allow a malicious user on the client side with access to client computer to run a custom script. IBM X-Force ID: 158278...

3.6CVSS5AI score0.0032EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2019/08/29 12:00 a.m.•23 views

WordPress ckeditor-for-wordpress plugin cross-site scripting vulnerability

WordPress is a set of blogging platform developed by WordPress Foundation using PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. ckeditor-for-wordpress is an editor plugin used in it. A cross-site scripting vulnerability exists in the 'built-in old...

6.1CVSS6.2AI score0.00913EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/29 12:00 a.m.•11 views

CVE-2019-4133: Undefined Security Weakness

IBM Cloud Automation Manager 3.1.2 could allow a malicious user on the client side with access to client computer to run a custom script. IBM X-Force ID: 158278...

5.2CVSS5.9AI score0.0032EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/08/29 12:00 a.m.•26 views

WordPress wp-plotly plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-plotly is a plugin for embedding interactive Plotly charts in pages. A cross-site scripting vulnerability exists in the WordPress...

6.1CVSS6.2AI score0.00913EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/08/29 12:00 a.m.•22 views

PT-2019-16914 · Ibm · Ibm Cloud Automation Manager

Name of the Vulnerable Software and Affected Versions: IBM Cloud Automation Manager version 3.1.2 Description: The issue allows a malicious user on the client side, with access to the client computer, to run a custom script. Recommendations: For IBM Cloud Automation Manager version 3.1.2, conside...

5.2CVSS4.9AI score0.0032EPSS
SaveExploits0References3
CNVD
CNVD
•added 2019/08/29 12:00 a.m.•23 views

WordPress feed-them-social plugin cross-site scripting vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the Facebook Feeds Load More button in versions of the WordPress...

6.1CVSS6.2AI score0.00913EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/08/29 12:00 a.m.•21 views

WordPress zoho-salesiq plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. zoho-salesiq is one of the plug-ins used to track the behavior of website users. A cross-site scripting vulnerability exists in the...

6.1CVSS6.2AI score0.00922EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/08/29 12:00 a.m.•24 views

WordPress wp-polls plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-polls is a plugin used to build a voting system in it. A cross-site scripting vulnerability exists in WordPress wp-polls plugin...

6.1CVSS6.2AI score0.00917EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/08/29 12:00 a.m.•25 views

WordPress gd-rating-system plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. gd-rating-system is a rating system plugin used in it. A cross-site scripting vulnerability exists in the log.php file in versions of...

6.1CVSS6.2AI score0.00905EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/08/29 12:00 a.m.•6 views

PT-2019-12923

Name of the Vulnerable Software and Affected Versions Symantec My VIP portal affected versions not specified Description The issue is related to a cross-site scripting XSS exploit, which can enable attackers to inject client-side scripts into web pages viewed by other users, potentially bypassing...

4.8CVSS0.00629EPSS
SaveExploits0References2
CNVD
CNVD
•added 2019/08/29 12:00 a.m.•21 views

WordPress wp-rollback plugin cross-site scripting vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress wp-rollback plugin versions prior to 1.2.3. The vulnerability...

6.1CVSS6.3AI score0.00913EPSS
SaveExploits0References1
Rows per page
Query Builder