Lucene search
+L

62 matches found

Prion
Prion
added 2022/09/21 8:15 p.m.19 views

Cross site scripting

Multiple Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerabilities in WHA Crossword plugin = 1.1.10 at WordPress...

4.9CVSS5.4AI score0.00602EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/09/21 7:06 p.m.36 views

CVE-2022-36365 WordPress WHA Crossword plugin <= 1.1.10 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerabilities in WHA Crossword plugin = 1.1.10 at WordPress...

5.4CVSS5.6AI score0.00602EPSS
SaveExploits1References2
CVE
CVE
added 2022/09/21 7:06 p.m.80 views

CVE-2022-36365

CVE-2022-36365 affects the WordPress plugin WHA Crossword up to version 1.1.10 . The issue is described as multiple authenticated stored XSS vulnerabilities (contributor+ level) arising from insufficient input sanitization/escaping, enabling an attacker with at least contributor privileges to inj...

5.4CVSS5.4AI score0.00602EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2022/09/21 12:00 a.m.7 views

WordPress plugin WHA Crossword 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.4CVSS5.5AI score0.00602EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/09/21 12:00 a.m.17 views

PT-2022-23330 · Unknown · Wha Crossword Plugin

Name of the Vulnerable Software and Affected Versions: WHA Crossword plugin versions 1.1.10 and earlier Description: The issue concerns multiple authenticated Stored Cross-Site Scripting XSS vulnerabilities. These vulnerabilities can be exploited by contributors or users with higher privileges. T...

5.4CVSS5.5AI score0.00602EPSS
SaveExploits1References5
WPVulnDB
WPVulnDB
added 2022/09/01 12:00 a.m.29 views

WHA Crossword <= 1.1.10 - Contributor+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some parameters, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

5.4CVSS3AI score0.0045EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2022/09/01 12:00 a.m.24 views

WordPress WHA Crossword plugin <= 1.1.10 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Ngo Van Thien Patchstack Alliance in WordPress WHA Crossword plugin versions = 1.1.10. Solution Deactivate and delete. No reply from the vendor...

5.4CVSS2.7AI score0.0045EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2022/09/01 12:00 a.m.24 views

WordPress WHA Crossword plugin <= 1.1.10 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities were discovered by Vlad Vector Patchstack in the WordPress WHA Crossword plugin versions = 1.1.10. Solution Deactivate and delete. No reply from the vendor...

5.4CVSS2.4AI score0.00602EPSS
SaveExploits1Affected Software1
hackapp
hackapp
added 2016/04/03 7:30 a.m.14 views

クロスワード 無料 560問以上が楽しめる脳トレ・暇つぶし! - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application クロスワード 無料 560問以上が楽しめる脳トレ・暇つぶし! published at the 'play' market has multiple vulnerabilities...

0.5AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 10:15 a.m.7 views

Real crossword (free) - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Real crossword free published at the 'play' market has multiple vulnerabilities...

0.3AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 10:14 a.m.16 views

Crossword Lite - Base64 encoded String, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Crossword Lite published at the 'play' market has multiple vulnerabilities...

0.3AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 10:14 a.m.24 views

Cruciverba in Italiano gratis - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Cruciverba in Italiano gratis published at the 'play' market has multiple vulnerabilities...

0.9AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 10:14 a.m.14 views

Crossword Shop - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Crossword Shop published at the 'play' market has multiple vulnerabilities...

0.1AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 10:14 a.m.10 views

Jigsaw Crossword - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Jigsaw Crossword published at the 'play' market has multiple vulnerabilities...

0.1AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 10:14 a.m.12 views

Crossword - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Crossword published at the 'play' market has multiple vulnerabilities...

0.2AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 10:14 a.m.13 views

Compact Crossword - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Compact Crossword published at the 'play' market has multiple vulnerabilities...

0.4AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 10:13 a.m.13 views

Crossword Puzzle Free - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Crossword Puzzle Free published at the 'play' market has multiple vulnerabilities...

0.2AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 10:13 a.m.27 views

وصلة - لعبة كلمات متقاطعة - Exported ContentProvider, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application وصلة - لعبة كلمات متقاطعة published at the 'play' market has multiple vulnerabilities...

0.9AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 10:13 a.m.10 views

Crossword Unlimited - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Crossword Unlimited published at the 'play' market has multiple vulnerabilities...

0.5AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 10:13 a.m.18 views

Arrow Crossword - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Arrow Crossword published at the 'play' market has multiple vulnerabilities...

0.1AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder