Lucene search
+L

5 matches found

OSV
OSV
•added 2024/02/05 10:15 p.m.•16 views

CVE-2023-6701

The Advanced Custom Fields ACF plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a custom text field in all versions up to, and including, 6.2.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-lev...

5.4CVSS5.9AI score0.00518EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/05 12:00 a.m.•1 views

CVE-2023-6701: Improper Neutralization of Input During Web Page Generation

The Advanced Custom Fields ACF plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a custom text field in all versions up to, and including, 6.2.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-lev...

6.4CVSS5.9AI score0.00518EPSS
SaveExploits0References3
NVD
NVD
•added 2008/01/17 10:00 p.m.•30 views

CVE-2008-0335

Cross-site scripting XSS vulnerability in BugTracker.NET before 2.7.2 allows remote attackers to inject arbitrary web script or HTML via an arbitrary custom text field...

4.3CVSS5.7AI score0.01065EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2008/01/17 9:07 p.m.•31 views

CVE-2008-0335

Cross-site scripting XSS vulnerability in BugTracker.NET before 2.7.2 allows remote attackers to inject arbitrary web script or HTML via an arbitrary custom text field...

5.7AI score0.01065EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/01/17 12:00 a.m.•4 views

CVE-2008-0335: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in BugTracker.NET before 2.7.2 allows remote attackers to inject arbitrary web script or HTML via an arbitrary custom text field...

4.3CVSS5.9AI score0.01065EPSS
SaveExploits0References2
Rows per page
Query Builder