Lucene search
K

26 matches found

CNNVD
CNNVD
added 2022/12/20 12:0 a.m.1 views

Sidebar Widgets by CodeLights 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in Sidebar...

5.5CVSS5.1AI score0.00303EPSS
Exploits0References3
Fedora
Fedora
added 2022/11/24 1:27 a.m.11 views

[SECURITY] Fedora 37 Update: drupal7-link-1.11-1.fc37

The link module can be count to the top 50 modules in Drupal installations and provides a standard custom content field for links. With this module links can be added easily to any content types and profiles and include advanced validating and different ways of storing internal or external links...

7.1AI score
Exploits0
OpenVAS
OpenVAS
added 2022/11/24 12:0 a.m.5 views

Fedora: Security Advisory for drupal7-link (FEDORA-2022-d209710a36)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
OSV
OSV
added 2022/04/28 4:15 p.m.13 views

CVE-2022-29584

Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 allows stored XSS when a particular Cascading Style Sheets CSS class for embedly is used, and JavaScript code is constructed to perform an action...

5.4CVSS6AI score
Exploits0References2
OSV
OSV
added 2022/02/01 1:15 p.m.0 views

CVE-2021-24686

The SVG Support WordPress plugin before 2.3.20 does not escape the "CSS Class to target" setting before outputting it in an attribute, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS5.8AI score
Exploits0References2
Zero Day Initiative
Zero Day Initiative
added 2006/08/08 12:0 a.m.35 views

Microsoft Internet Explorer CSS Class Ordering Memory Corruption Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific vulnerability exists due to improper handling of CSS...

7.5CVSS4AI score0.60155EPSS
Exploits0References1
Rows per page
Query Builder