Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 3:6 p.m.0 views

CVE-2026-22183

wpDiscuz before 7.6.47 contains a stored cross-site scripting vulnerability in the inline comment preview functionality that allows authenticated users to inject malicious scripts by submitting comments with unescaped content. Attackers with unfilteredhtml capabilities can inject JavaScript...

6.1CVSS5.6AI score0.00052EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/13 9:31 p.m.2 views

EUVD-2026-11740

wpDiscuz before 7.6.47 contains a stored cross-site scripting vulnerability in the inline comment preview functionality that allows authenticated users to inject malicious scripts by submitting comments with unescaped content. Attackers with unfilteredhtml capabilities can inject JavaScript...

6.1CVSS5.7AI score0.00052EPSS
Exploits0References4
NVD
NVD
added 2026/03/13 7:54 p.m.2 views

CVE-2026-22183

wpDiscuz before 7.6.47 contains a stored cross-site scripting vulnerability in the inline comment preview functionality that allows authenticated users to inject malicious scripts by submitting comments with unescaped content. Attackers with unfilteredhtml capabilities can inject JavaScript...

6.1CVSS0.00052EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/03/13 1:18 a.m.1 views

CVE-2026-22183 wpDiscuz before 7.6.47 - Stored Cross-Site Scripting in Inline Comment Preview

wpDiscuz before 7.6.47 contains a stored cross-site scripting vulnerability in the inline comment preview functionality that allows authenticated users to inject malicious scripts by submitting comments with unescaped content. Attackers with unfilteredhtml capabilities can inject JavaScript...

6.1CVSS5.6AI score0.00052EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/03/13 1:18 a.m.23 views

CVE-2026-22183 wpDiscuz before 7.6.47 - Stored Cross-Site Scripting in Inline Comment Preview

wpDiscuz before 7.6.47 contains a stored cross-site scripting vulnerability in the inline comment preview functionality that allows authenticated users to inject malicious scripts by submitting comments with unescaped content. Attackers with unfilteredhtml capabilities can inject JavaScript...

6.1CVSS0.00052EPSS
Exploits0References3
CVE
CVE
added 2026/03/13 1:18 a.m.4 views

CVE-2026-22183

CVE-2026-22183 affects the WordPress wpDiscuz plugin prior to 7.6.47. The stored XSS occurs in the inline comment preview, where comment content rendered in the AJAX response from getLastInlineComments() in class.WpdiscuzHelperAjax.php is not properly HTML escaped. Attackers with unfiltered_html ...

6.1CVSS5.6AI score0.00052EPSS
Exploits0References3Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2007-0624

Malware in sbrugna...

6.5CVSS6.1AI score0.04969EPSS
Exploits0References11
Rows per page
Query Builder