Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/02/04 10:12 p.m.11 views

CVE-2024-35668

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Brevo Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue allows Reflected XSS.This issue affects Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue: from n/...

7.1CVSS6.9AI score0.00288EPSS
Exploits0References1
NVD
NVD
added 2024/06/04 2:15 p.m.47 views

CVE-2024-35668

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Brevo Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue allows Reflected XSS.This issue affects Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue: from n/...

7.1CVSS7AI score0.00288EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/06/04 1:48 p.m.35 views

CVE-2024-35668 WordPress Newsletter, SMTP, Email marketing and Subscribe forms by Brevo plugin <= 3.1.77 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Brevo Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue allows Reflected XSS.This issue affects Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue: from n/...

7.1CVSS6.5AI score0.00288EPSS
Exploits0References1
CVE
CVE
added 2024/06/04 1:48 p.m.60 views

CVE-2024-35668

CVE-2024-35668 describes a Reflected XSS vulnerability in the Brevo (Newsletter, SMTP, Email marketing and Subscribe forms by Brevo) plugin for WordPress. The issue arises from improper input neutralization during web page generation, enabling reflected cross-site scripting. Affected versions are...

7.1CVSS6.7AI score0.00288EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/04 1:48 p.m.18 views

CVE-2024-35668 WordPress Newsletter, SMTP, Email marketing and Subscribe forms by Brevo plugin <= 3.1.77 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Brevo Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue allows Reflected XSS.This issue affects Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue: from n/...

7.1CVSS7AI score0.00288EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/06/03 12:0 a.m.15 views

WordPress Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue Plugin <= 3.1.77 is vulnerable to Cross Site Scripting (XSS)

Software Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue Type Plugin Vulnerable versions = 3.1.77 Fixed in 3.1.78 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-35668 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID...

7.1CVSS6.5AI score0.00288EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder