Lucene search
+L

5 matches found

Patchstack
Patchstack
added 2025/04/01 3:50 p.m.5 views

WordPress PhotoShelter for Photographers Blog Feed plugin <= 1.5.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin PhotoShelter for Photographers Blog Feed Plugin versions = 1.5.7...

6.5CVSS6.9AI score0.00331EPSS
Exploits0Affected Software1
NVD
NVD
added 2025/04/01 3:16 p.m.4 views

CVE-2025-31766

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PhotoShelter PhotoShelter for Photographers Blog Feed Plugin photoshelter-official-plugin allows Stored XSS.This issue affects PhotoShelter for Photographers Blog Feed Plugin: from n/a through =...

6.5CVSS0.00331EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/01 2:51 p.m.16 views

CVE-2025-31766 WordPress PhotoShelter for Photographers Blog Feed plugin <= 1.5.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PhotoShelter PhotoShelter for Photographers Blog Feed Plugin photoshelter-official-plugin allows Stored XSS.This issue affects PhotoShelter for Photographers Blog Feed Plugin: from n/a through =...

6.5CVSS0.00331EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/01 2:51 p.m.5 views

CVE-2025-31766 WordPress PhotoShelter for Photographers Blog Feed plugin <= 1.5.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PhotoShelter PhotoShelter for Photographers Blog Feed Plugin allows Stored XSS. This issue affects PhotoShelter for Photographers Blog Feed Plugin: from n/a through 1.5.7...

6.5CVSS7AI score0.00331EPSS
Exploits0References1
CVE
CVE
added 2025/04/01 2:51 p.m.43 views

CVE-2025-31766

CVE-2025-31766 is a Stored XSS in the PhotoShelter for Photographers Blog Feed Plugin (affected: versions up to 1.5.7, with minimum published version not specified). Root cause: Improper Neutralization of Input During Web Page Generation. Impact: Stored XSS potential as described by connected doc...

6.5CVSS7.2AI score0.00331EPSS
Exploits0References1
Rows per page
Query Builder