Lucene search
K

6 matches found

NVD
NVD
added 2025/04/24 4:15 a.m.14 views

CVE-2025-3435

The Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the boardheader and boardfooter parameters in all versions up to, and including, 1.8.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

4.4CVSS0.00196EPSS
Exploits0References2
Circl
Circl
added 2025/04/24 4:5 a.m.9 views

CVE-2025-3435

creationtimestamp| type| source ---|---|--- 2025-04-24 04:05:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13180 2025-04-24 05:15:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnjxaditeu2l 2025-04-24 08:52:54+00:00| seen| https://t.me/cvedetector/23642...

4.4CVSS8.7AI score0.00196EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/04/24 3:21 a.m.15 views

CVE-2025-3435 MangBoard WP <= 1.8.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Board Header And Footer

The Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the boardheader and boardfooter parameters in all versions up to, and including, 1.8.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

4.4CVSS0.00196EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/04/24 3:21 a.m.3 views

CVE-2025-3435 MangBoard WP <= 1.8.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Board Header And Footer

The Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the boardheader and boardfooter parameters in all versions up to, and including, 1.8.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

4.4CVSS5.8AI score0.00196EPSS
Exploits0References2
CVE
CVE
added 2025/04/24 3:21 a.m.61 views

CVE-2025-3435

Mang Board WP plugin for WordPress is affected by CVE-2025-3435. It allows Stored Cross-Site Scripting via board_header and board_footer in all versions up to 1.8.6 due to insufficient input sanitization and output escaping. Exploitation requires authenticated Administrator access and impacts mul...

4.4CVSS4.3AI score0.00196EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/04/23 8:29 p.m.4 views

WordPress MangBoard WP plugin <= 1.8.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Board Header And Footer vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting via Board Header And Footer vulnerability discovered by nquangit in WordPress Plugin Mang Board WP versions = 1.8.6...

4.4CVSS6.3AI score0.00196EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder