CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

Rapid7 Vulnerability Database (full)•added 2025/11/21 12:00 a.m.•5 views

CVE-2025-11763: Improper Neutralization of Input During Web Page Generation

The Display Pages Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'columncount' parameter in the display-pages shortcode in all versions up to, and including, 1.1. This is due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS6.1AI score0.00222EPSS

SaveExploits0References2

NVD•added 2023/09/28 5:15 a.m.•42 views

CVE-2023-44275

OPNsense before 23.7.5 allows XSS via the index.php columncount parameter to the Lobby Dashboard...

5.4CVSS5.3AI score0.00605EPSS

SaveExploits1References3

Prion•added 2023/09/28 5:15 a.m.•32 views

Cross site scripting

OPNsense before 23.7.5 allows XSS via the index.php columncount parameter to the Lobby Dashboard...

4.9CVSS5.2AI score0.00605EPSS

SaveExploits1References3Affected Software1

Mend•added 2023/09/28 12:00 a.m.•3 views

CVE-2023-44275

OPNsense before 23.7.5 allows XSS via the index.php columncount parameter to the Lobby Dashboard...

5.4CVSS0.00605EPSS

SaveExploits1References5

Rapid7 Vulnerability Database (full)•added 2023/09/28 12:00 a.m.•6 views

CVE-2023-44275: Improper Neutralization of Input During Web Page Generation

OPNsense before 23.7.5 allows XSS via the index.php columncount parameter to the Lobby Dashboard...

5.4CVSS6AI score0.00605EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by