Lucene search
+L

59 matches found

NVD
NVD
•added 2024/03/27 7:15 a.m.•33 views

CVE-2024-27188

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cloudways Breeze breeze.This issue affects Breeze: from n/a through = 2.1.3...

5.9CVSS5.7AI score0.00342EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/03/27 6:35 a.m.•26 views

CVE-2024-27188 WordPress Breeze plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cloudways Breeze breeze.This issue affects Breeze: from n/a through = 2.1.3...

5.9CVSS7.2AI score0.00342EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/27 6:35 a.m.•49 views

CVE-2024-27188 WordPress Breeze plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cloudways Breeze breeze.This issue affects Breeze: from n/a through = 2.1.3...

5.9CVSS5.9AI score0.00342EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/27 6:35 a.m.•243 views

CVE-2024-27188

CVE-2024-27188 concerns the WordPress Breeze plugin (Cloudways Breeze) with a stored XSS vulnerability caused by improper neutralization of input during web page generation. Affected versions are Breeze through 2.1.3; the patch is to upgrade to version 2.1.4 or later. The issue requires the attac...

5.9CVSS7.2AI score0.00342EPSS
SaveIn wildExploits0References2
attackerkb
attackerkb
•added 2024/03/27 12:00 a.m.•178 views

CVE-2024-27188

Improper Neutralization of Input During Web Page Generation ‘Cross-site Scripting’ vulnerability in Cloudways Breeze allows Stored XSS.This issue affects Breeze: from n/a through 2.1.3. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

5.9CVSS6AI score0.00342EPSS
SaveIn wildExploits0References2
Patchstack
Patchstack
•added 2024/03/25 12:00 a.m.•20 views

WordPress Breeze Plugin <= 2.1.3 is vulnerable to Cross Site Scripting (XSS)

Software Breeze Type Plugin Vulnerable versions = 2.1.3 Fixed in 2.1.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-27188 Patch priority Low CVSS severity Low 5.9 Developer Cloudways PSID ea09c0200c6b Credits Jorge Diaz ddiax Required privilege Administrator...

5.9CVSS6.9AI score0.00342EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
•added 2022/05/11 12:00 a.m.•60 views

WordPress Breeze Plugin < 2.0.3 XSS Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

6.5CVSS5.6AI score0.00571EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/05/07 12:00 a.m.•52 views

WordPress Cloudways Breeze plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Cloudways Breeze plugin 2.0.2 and earlier versions have a cross-site scripting vulnerabilit...

6.5CVSS1.9AI score0.00571EPSS
SaveExploits0References1
NVD
NVD
•added 2022/05/02 8:15 p.m.•28 views

CVE-2022-29444

Plugin Settings Change leading to Cross-Site Scripting XSS vulnerability in Cloudways Breeze plugin = 2.0.2 on WordPress allows users with a subscriber or higher user role to execute any of the wpajax actions in the class BreezeConfiguration which includes the ability to change any of the plugin'...

6.5CVSS0.00571EPSS
SaveExploits0References2
Prion
Prion
•added 2022/05/02 8:15 p.m.•31 views

Cross site scripting

Plugin Settings Change leading to Cross-Site Scripting XSS vulnerability in Cloudways Breeze plugin = 2.0.2 on WordPress allows users with a subscriber or higher user role to execute any of the wpajax actions in the class BreezeConfiguration which includes the ability to change any of the plugin'...

3.5CVSS5.3AI score0.00571EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/05/02 7:03 p.m.•35 views

CVE-2022-29444 WordPress Breeze plugin <= 2.0.2 - Plugin Settings Change leading to Cross-Site Scripting (XSS) vulnerability

Plugin Settings Change leading to Cross-Site Scripting XSS vulnerability in Cloudways Breeze plugin = 2.0.2 on WordPress allows users with a subscriber or higher user role to execute any of the wpajax actions in the class BreezeConfiguration which includes the ability to change any of the plugin'...

6.5CVSS6.1AI score0.00571EPSS
SaveExploits0References2
CVE
CVE
•added 2022/05/02 7:03 p.m.•104 views

CVE-2022-29444

The Cloudways Breeze plugin for WordPress (versions

6.5CVSS5.4AI score0.00571EPSS
SaveIn wildExploits0References2Affected Software1
Mend
Mend
•added 2022/05/02 7:03 p.m.•1 views

CVE-2022-29444

Plugin Settings Change leading to Cross-Site Scripting XSS vulnerability in Cloudways Breeze plugin = 2.0.2 on WordPress allows users with a subscriber or higher user role to execute any of the wpajax actions in the class BreezeConfiguration which includes the ability to change any of the plugin'...

6.5CVSS0.00571EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/05/02 1:12 p.m.•13 views

CVE-2022-29444

Plugin Settings Change leading to Cross-Site Scripting XSS vulnerability in Cloudways Breeze plugin = 2.0.2 on WordPress allows users with a subscriber or higher user role to execute any of the wpajax actions in the class BreezeConfiguration which includes the ability to change any of the plugin'...

6.5CVSS5.6AI score0.00571EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2022/05/02 12:00 a.m.•0 views

PT-2022-19618

Name of the Vulnerable Software and Affected Versions Cloudways Breeze plugin versions = 2.0.2 Description The issue allows users with a subscriber or higher user role to execute any of the wp ajax actions in the class Breeze Configuration. This includes the ability to change any of the plugin's...

6.5CVSS0.00571EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/02 12:00 a.m.•4 views

CVE-2022-29444: Improper Neutralization of Input During Web Page Generation

Plugin Settings Change leading to Cross-Site Scripting XSS vulnerability in Cloudways Breeze plugin = 2.0.2 on WordPress allows users with a subscriber or higher user role to execute any of the wpajax actions in the class BreezeConfiguration which includes the ability to change any of the plugin'...

6.5CVSS6.2AI score0.00571EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/05/02 12:00 a.m.•18 views

WordPress plugin Cloudways Breeze 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Cloudways Breeze plugin 2.0.2 and earlier versions have a cross-site scripting vulnerabilit...

6.5CVSS5.6AI score0.00571EPSS
SaveExploits0References4
Openbugbounty
Openbugbounty
•added 2020/05/20 12:18 a.m.•9 views

support.cloudways.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1166589 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2020/05/20 12:17 a.m.•11 views

cloudways.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1166588 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

7.1AI score
SaveExploits0
Rows per page
Query Builder