Lucene search
+L

5635 matches found

CNNVD
CNNVD
added 2022/04/04 12:0 a.m.5 views

WordPress plugin Insights from Google PageSpeed 跨站脚本漏洞

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL. WordPress plugin is a WordPress open source application plugin. WordPress Insights from Google PageSpeed...

6.1CVSS5.7AI score0.00863EPSS
SaveExploits2References3
CNNVD
CNNVD
added 2022/04/03 12:0 a.m.22 views

jc21 Nginx Proxy Manager 跨站脚本漏洞

jc21 Nginx Proxy Manager is a graphical user interface for managing Nginx servers. jc21 Nginx Proxy Manager versions prior to 2.9.17 contain a cross-site scripting vulnerability that stems from the program's lack of data validation filtering of user-supplied data and output. An attacker could...

6.8CVSS5.6AI score0.71209EPSS
SaveExploits1References3
CNVD
CNVD
added 2022/04/01 12:0 a.m.41 views

Multiple Apple products have unspecified vulnerabilities (CNVD-2022-55136)

Apple macOS Big Sur is a mobile app from Apple. macOS Catalina is a dedicated operating system for Mac computers from Apple. macOS Monterey is Apple's 18th major version of macOS for Macintosh. macOS Monterey is the 18th major version of Apple's desktop operating system, macOS. Several Apple...

7.1CVSS4.3AI score0.01312EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/04/01 12:0 a.m.29 views

Zoho ManageEngine Netflow Analyzer Professional跨站脚本漏洞

ZOHO ManageEngine Netflow Analyzer is a web-based bandwidth monitoring tool from ZOHO, Inc. A cross-site scripting vulnerability exists in ZOHO ManageEngine Netflow Analyzer Professional version 7.0.0.2, which stems from the lack of proper validation of client-side data by the web application and...

6.1CVSS4.5AI score0.02688EPSS
SaveExploits2References1
CNVD
CNVD
added 2022/04/01 12:0 a.m.61 views

WordPress CleanTalk plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress application plugin. WordPress CleanTalk plugin 5.173 and earlier versions have a cross-sit...

6.1CVSS2AI score0.02886EPSS
SaveExploits3References1
CNVD
CNVD
added 2022/04/01 12:0 a.m.41 views

TotoLink EX300_v2 Cross-Site Scripting Vulnerability

TotoLink EX300 is a 300 Mbps wireless N range extender from TotoLink China. version TotoLink EX300v2 V4.0.3c.140B20210429 has a cross-site scripting vulnerability that can be exploited by attackers to execute JavaScript code on the client side...

6.1CVSS3.6AI score0.00631EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/03/31 12:0 a.m.24 views

Sourcecodester Hospital Patient Records Management System跨站脚本漏洞(CNVD-2022-48761)

Sourcecodester Hospital Patient Records Management System is a Web-based application that provides an automated platform for hospitals to store and manage their patient records. A cross-site scripting vulnerability exists in version 1.0, which stems from the lack of proper validation of client-si...

5.4CVSS1.7AI score0.00479EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/03/31 12:0 a.m.55 views

Dolphin PHP Cross-Site Scripting Vulnerability

DolphinPhp is a set of Php rapid development framework based on ThinkPhp 5.1.34 Lts. A cross-site scripting vulnerability exists in DolphinPHP 1.5.0 and prior versions, which stems from the program's lack of data validation filtering of user-supplied and output data. An attacker could exploit the...

3.5CVSS2.9AI score0.00614EPSS
SaveExploits1Affected Software1
CNVD
CNVD
added 2022/03/31 12:0 a.m.50 views

Sourcecodester Student Attendance Management System跨站脚本漏洞

Sourcecodester Student Attendance Management System is an attendance management system used to maintain daily attendance records. A cross-site scripting vulnerability exists in Sourcecodester Student Attendance Management System version 1.0. The vulnerability stems from a lack of data validation...

5.4CVSS4AI score0.00542EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/03/31 12:0 a.m.65 views

Joomla! Cross-site scripting vulnerability (CNVD-2022-64104)

Joomla! is a set of forum components used in the Joomla! content management system. versions 3.7.0 to 3.10.6 have a cross-site scripting vulnerability, which originates from the comfields class that does not sufficiently clean up and escape data provided to the user, and can be used by attackers ...

6.1CVSS3.4AI score0.00577EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/03/31 12:0 a.m.52 views

Jenkins Bitbucket Server Integration Plugin跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier versions are...

5.4CVSS2.4AI score0.00812EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/03/30 12:0 a.m.16 views

WordPress Mapping Multiple URLs Redirect Same Page plugin Cross Site Scripting Vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress...

6.1CVSS6.1AI score0.01713EPSS
SaveExploits2References1
CNVD
CNVD
added 2022/03/30 12:0 a.m.18 views

WordPress Pz-LinkCard plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in the...

6.1CVSS6.2AI score0.00788EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/03/30 12:0 a.m.22 views

WordPress Conference Scheduler plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in the...

6.1CVSS6.2AI score0.00788EPSS
SaveExploits2References1
CNVD
CNVD
added 2022/03/30 12:0 a.m.15 views

WordPress Popup Like box plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress...

6.1CVSS6.2AI score0.00788EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/03/30 12:0 a.m.15 views

WordPress Database Peek plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress...

6.1CVSS6.2AI score0.00788EPSS
SaveExploits2References1
CNVD
CNVD
added 2022/03/30 12:0 a.m.57 views

WordPress Social Sharing plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in the...

6.1CVSS6.1AI score0.02244EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2022/03/30 12:0 a.m.9 views

TotoLink EX300 跨站脚本漏洞

TotoLink EX300 is a 300 Mbps wireless N range extender from TotoLink China. version TotoLink EX300v2 V4.0.3c.140B20210429 has a cross-site scripting vulnerability that can be exploited by attackers to execute JavaScript code on the client side...

6.1CVSS5.6AI score0.00631EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/03/29 12:0 a.m.5 views

DolphinPHP 跨站脚本漏洞

DolphinPhp is a set of Php rapid development framework based on ThinkPhp 5.1.34 Lts. A cross-site scripting vulnerability exists in DolphinPHP 1.5.0 and prior versions, which stems from the program's lack of data validation filtering of user-supplied and output data. An attacker could exploit the...

5.4CVSS5.6AI score0.00614EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/03/29 12:0 a.m.7 views

Sourcecodester Hospital Patient Records Management System 跨站脚本漏洞

Sourcecodester Hospital Patient Records Management System is a Web-based application that provides an automated platform for hospitals to store and manage their patient records. A cross-site scripting vulnerability exists in version 1.0, which stems from the lack of proper validation of client-si...

5.4CVSS5.5AI score0.00479EPSS
SaveExploits1References4
Rows per page
Query Builder