Lucene search
+L

7 matches found

Cvelist
Cvelist
added 2026/07/16 7:51 a.m.35 views

CVE-2026-15106 WPBot <= 8.5.6 - Missing Authorization to Unauthenticated Arbitrary Chat Session Deletion via 'userid' Parameter

The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 8.5.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

5.3CVSS0.00273EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/07/16 7:51 a.m.9 views

EUVD-2026-44892

The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 8.5.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

5.3CVSS6.2AI score0.00273EPSS
SaveExploits0References8
Packet Storm News
Packet Storm News
added 2026/03/23 12:0 a.m.22 views

AI in Cybersecurity Education -- Scalable Agentic CTF Design Principles and Educational Outcomes

Large language models are rapidly changing how learners acquire and demonstrate cybersecurity skills. However, when human--AI collaboration is allowed, educators still lack validated competition designs and evaluation practices that remain fair and evidence-based. This paper presents a...

5.8AI score
SaveExploits0
NVD
NVD
added 2007/07/19 5:30 p.m.20 views

CVE-2007-3910

Cross-site scripting XSS vulnerability in Bandersnatch 0.4 allows remote attackers to inject arbitrary JavaScript via a Jabber resource name and possibly other data items, which are stored in conversation logs...

4.3CVSS5.6AI score0.0125EPSS
SaveExploits0References6
Prion
Prion
added 2007/07/19 5:30 p.m.19 views

Cross site scripting

Cross-site scripting XSS vulnerability in Bandersnatch 0.4 allows remote attackers to inject arbitrary JavaScript via a Jabber resource name and possibly other data items, which are stored in conversation logs...

4.3CVSS5.9AI score0.0125EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2007/07/19 5:0 p.m.28 views

CVE-2007-3910

Cross-site scripting XSS vulnerability in Bandersnatch 0.4 allows remote attackers to inject arbitrary JavaScript via a Jabber resource name and possibly other data items, which are stored in conversation logs...

5.5AI score0.0125EPSS
SaveExploits0References6
CVE
CVE
added 2007/07/19 5:0 p.m.52 views

CVE-2007-3910

Bandersnatch 0.4 is affected by an XSS vulnerability (CVE-2007-3910) where remote attackers can inject arbitrary JavaScript via a Jabber resource name (and possibly other data items) that are stored in conversation logs. Multiple sources in the connected set corroborate the issue and describe the...

4.3CVSS5.6AI score0.0125EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder