Lucene search
+L

275 matches found

RedhatCVE
RedhatCVE
•added 2026/03/26 5:02 p.m.•15 views

CVE-2026-32517

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kleor Contact Manager contact-manager allows Reflected XSS.This issue affects Contact Manager: from n/a through = 9.1...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/25 6:31 p.m.•27 views

EUVD-2026-15878

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kleor Contact Manager contact-manager allows Reflected XSS.This issue affects Contact Manager: from n/a through = 9.1...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/25 5:17 p.m.•19 views

CVE-2026-32517

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kleor Contact Manager contact-manager allows Reflected XSS.This issue affects Contact Manager: from n/a through = 9.1...

7.1CVSS0.00251EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/25 4:15 p.m.•10 views

CVE-2026-32517 WordPress Contact Manager plugin <= 9.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kleor Contact Manager contact-manager allows Reflected XSS.This issue affects Contact Manager: from n/a through = 9.1...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/25 4:15 p.m.•34 views

CVE-2026-32517

CVE-2026-32517 : A Reflected Cross-site Scripting (XSS) vulnerability exists in Kleor Contact Manager (contact-manager), caused by improper neutralization of input during web page generation. The issue affects Contact Manager versions up to 9.1. Successful exploitation could allow an attacker to ...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/25 4:15 p.m.•10 views

CVE-2026-32517

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kleor Contact Manager contact-manager allows Reflected XSS.This issue affects Contact Manager: from n/a through = 9.1...

5.8AI score0.00251EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/03/25 4:15 p.m.•41 views

CVE-2026-32517 WordPress Contact Manager plugin <= 9.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kleor Contact Manager contact-manager allows Reflected XSS.This issue affects Contact Manager: from n/a through = 9.1...

7.1CVSS0.00251EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/25 12:00 a.m.•32 views

PT-2026-28031

Name of the Vulnerable Software and Affected Versions Kleor Contact Manager versions through 9.1 Description A Reflected Cross-site Scripting XSS issue exists in Kleor Contact Manager. The issue is due to improper neutralization of input during web page generation. This allows an attacker to inje...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•2 views

CVE-2026-32517: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kleor Contact Manager contact-manager allows Reflected XSS.This issue affects Contact Manager: from n/a through = 9.1...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•20 views

WordPress plugin Contact Manager 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

7.1CVSS5.7AI score0.00251EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/03/23 12:55 p.m.•14 views

WordPress Contact Manager plugin <= 9.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by johska in WordPress Plugin Contact Manager versions = 9.1...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2026/02/21 7:30 p.m.•16 views

CVE-2025-68853

Deserialization of Untrusted Data vulnerability in Kleor Contact Manager contact-manager allows Object Injection.This issue affects Contact Manager: from n/a through = 9.1.1...

8.8CVSS5.5AI score0.00367EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/20 4:22 p.m.•14 views

CVE-2025-68853

Deserialization of Untrusted Data vulnerability in Kleor Contact Manager contact-manager allows Object Injection.This issue affects Contact Manager: from n/a through = 9.1.1...

8.8CVSS0.00367EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/20 3:46 p.m.•39 views

CVE-2025-68853 WordPress Contact Manager plugin <= 9.1.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Kleor Contact Manager contact-manager allows Object Injection.This issue affects Contact Manager: from n/a through = 9.1.1...

8.8CVSS0.00367EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/20 3:46 p.m.•22 views

CVE-2025-68853

The CVE CVE-2025-68853 affects WordPress Contact Manager plugin (contact-manager) up to version 9.1.1 and is a Deserialization of Untrusted Data (PHP Object Injection) vulnerability. Public sources (NVD/Red Hat/Patchstack/Wordfence) identify the root cause as untrusted data deserialization in con...

8.8CVSS5.8AI score0.00367EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/02/20 3:46 p.m.•10 views

CVE-2025-68853 WordPress Contact Manager plugin <= 9.1.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Kleor Contact Manager contact-manager allows Object Injection.This issue affects Contact Manager: from n/a through = 9.1.1...

5.8AI score0.00367EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/20 12:00 a.m.•17 views

PT-2026-21112

Name of the Vulnerable Software and Affected Versions Kleor Contact Manager versions through 9.1.1 Description A flaw exists in Kleor Contact Manager that allows for object injection due to deserialization of untrusted data. This issue impacts the contact-manager component. Recommendations At the...

5.5AI score0.00367EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/02/20 12:00 a.m.•18 views

WordPress plugin Contact Manager 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There we...

8.8CVSS5.9AI score0.00367EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/20 12:00 a.m.•4 views

CVE-2025-68853: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Kleor Contact Manager contact-manager allows Object Injection.This issue affects Contact Manager: from n/a through = 9.1.1...

8.8CVSS5.8AI score0.00367EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/02/04 12:53 p.m.•25 views

WordPress Contact Manager plugin <= 9.1.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Skalucy in WordPress Plugin Contact Manager versions = 9.1.1...

8.8CVSS5.6AI score0.00367EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder