Lucene search
+L

1247 matches found

NVD
NVD
added 2024/03/29 5:15 p.m.17 views

CVE-2024-30447

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative Solutions Creative Image Slider – Responsive Slider Plugin allows Reflected XSS.This issue affects Creative Image Slider – Responsive Slider Plugin: from n/a through 2.1.3...

7.1CVSS6.9AI score0.00375EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/29 4:51 p.m.13 views

CVE-2024-30447 WordPress Creative Image Slider plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative Solutions Creative Image Slider – Responsive Slider Plugin allows Reflected XSS.This issue affects Creative Image Slider – Responsive Slider Plugin: from n/a through 2.1.3...

7.1CVSS6.9AI score0.00375EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/29 4:51 p.m.58 views

CVE-2024-30447

Technical details about CVE-2024-30447 (Creative Image Slider – Responsive Slider Plugin) are not provided in the connected documents. No product version, root cause, impact, or patch information is publicly available here; monitor for official advisories and vendor/user notifications.

7.1CVSS8.6AI score0.00375EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/29 12:0 a.m.13 views

WordPress Plugin Creative Image Slider 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

7.1CVSS7.7AI score0.00375EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/03/29 12:0 a.m.19 views

PT-2024-23375 · WordPress · Creative Image Slider

Name of the Vulnerable Software and Affected Versions: Creative Image Slider – Responsive Slider Plugin versions n/a through 2.1.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows Reflected XSS...

7.1CVSS9.4AI score0.00375EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2024/03/21 12:0 a.m.15 views

WordPress Blocksy Companion Plugin <= 2.0.31 is vulnerable to Cross Site Scripting (XSS)

Software Blocksy Companion Type Plugin Vulnerable versions = 2.0.31 Fixed in 2.0.32 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2392 Patch priority Low CVSS severity Low 6.5 Developer Creative Themes PSID bbd31df0e8be Credits Ngô Thiên An ancorn...

6.5CVSS6AI score0.00346EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2024/03/11 12:0 a.m.12 views

WordPress Blocksy Theme <= 2.0.26 is vulnerable to Cross Site Scripting (XSS)

Software Blocksy Type Theme Vulnerable versions = 2.0.26 Fixed in 2.0.27 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1767 Patch priority Low CVSS severity Low 6.5 Developer Creative Themes PSID 674c245c46ca Credits Ngô Thiên An ancorn Required...

6.4CVSS5.7AI score0.0032EPSS
SaveExploits0References3Affected Software1
Openbugbounty
Openbugbounty
added 2024/03/01 10:55 p.m.5 views

creative-products.nl Improper Access Control vulnerability OBB-3863299

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
NVD
NVD
added 2024/02/12 8:15 a.m.24 views

CVE-2024-24926

Deserialization of Untrusted Data vulnerability in UnitedThemes Brooklyn | Creative Multi-Purpose Responsive WordPress Theme.This issue affects Brooklyn | Creative Multi-Purpose Responsive WordPress Theme: from n/a through 4.9.7.6...

8.8CVSS7.6AI score0.01089EPSS
SaveExploits0References1
CVE
CVE
added 2024/02/12 7:9 a.m.106 views

CVE-2024-24926

CVE-2024-24926 describes a deserialization of untrusted data vulnerability in UnitedThemes Brooklyn Theme (WordPress Brooklyn) up to version 4.9.7.6. The connected documents specify a PHP object injection/deserialization flaw as the root cause and list the affected software as the Brooklyn Theme,...

8.8CVSS7.8AI score0.01089EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2024/02/12 6:7 a.m.99 views

CVE-2024-24927

CVE-2024-24927 affects UnitedThemes Brooklyn – a WordPress theme – with a Reflected XSS caused by improper input neutralization during web page generation. Affected versions are listed as up to 4.9.7.6 (n/a). Multiple sources corroborate the basic vulnerability description, including Red Hat, NVD...

7.1CVSS7.1AI score0.00331EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/02/08 1:15 p.m.30 views

CVE-2024-24871

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in creativethemeshq Blocksy blocksy.This issue affects Blocksy: from n/a through = 2.0.19...

6.5CVSS6.4AI score0.0032EPSS
SaveExploits0References2
Prion
Prion
added 2024/02/08 1:15 p.m.23 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative Themes Blocksy allows Stored XSS.This issue affects Blocksy: from n/a through 2.0.19...

4.9CVSS7.2AI score0.0032EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2024/02/08 1:6 p.m.57 views

CVE-2024-24871

CVE-2024-24871 affects the WordPress Blocksy Theme up to version 2.0.19. The issue is a Stored XSS caused by improper neutralization of input during web page generation. Impact is described as low severity (CVSS ~6.5) with network attack vector, low attack complexity, privileges required: LOW, an...

6.5CVSS6.8AI score0.0032EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/02/05 12:0 a.m.16 views

WordPress Blocksy Theme <= 2.0.19 is vulnerable to Cross Site Scripting (XSS)

Software Blocksy Type Theme Vulnerable versions = 2.0.19 Fixed in 2.0.20 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-24871 Patch priority Low CVSS severity Low 6.5 Developer Creative Themes PSID 07c604dd56fb Credits savphill Required privilege Editor Published ...

6.5CVSS6.5AI score0.0032EPSS
SaveExploits0References2Affected Software1
Schneier on Security
Schneier on Security
added 2024/01/19 12:21 p.m.16 views

Speaking to the CIA’s Creative Writing Group

This is a fascinating story. Last spring, a friend of a friend visited my office and invited me to Langley to speak to Invisible Ink, the CIAs creative writing group. I asked Vivian not her real name what she wanted me to talk about. She said that the topic of the talk was entirely up to me. I...

7.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/01/12 8:36 a.m.9 views

creative.smiles.co.jp Cross Site Scripting vulnerability OBB-3832740

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
CVE
CVE
added 2023/12/28 9:56 a.m.93 views

CVE-2023-51501

CVE-2023-51501 affects Undsgn Uncode (WordPress theme) — Uncode Core

7.1CVSS7.1AI score0.00351EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2023/12/20 4:15 p.m.29 views

CVE-2023-49772

Deserialization of Untrusted Data vulnerability in Phpbits Creative Studio Genesis Simple Love.This issue affects Genesis Simple Love: from n/a through 2.0...

10CVSS0.00727EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/20 4:15 p.m.6 views

CVE-2023-49772

Deserialization of Untrusted Data vulnerability in Phpbits Creative Studio Genesis Simple Love.This issue affects Genesis Simple Love: from n/a through 2.0...

9.8CVSS5.8AI score0.00727EPSS
SaveExploits0References1
Rows per page
Query Builder