Lucene search
K

4 matches found

Circl
Circl
added 2025/05/31 8:41 a.m.16 views

CVE-2025-5290

creationtimestamp| type| source ---|---|--- 2025-05-31 08:41:09+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqhdy4u7jou2 2025-05-31 11:57:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqhoym5ob62q...

6.4CVSS5.7AI score0.00246EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/05/31 7:22 a.m.16 views

CVE-2025-5290 Borderless – Elementor Addons and Templates <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Borderless – Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ parameter in all versions up to, and including, 1.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

6.4CVSS0.00246EPSS
Exploits0References8
Vulnrichment
Vulnrichment
added 2025/05/31 7:22 a.m.4 views

CVE-2025-5290 Borderless – Elementor Addons and Templates <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Borderless – Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ parameter in all versions up to, and including, 1.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

6.4CVSS5.8AI score0.00246EPSS
Exploits0References8
Patchstack
Patchstack
added 2025/05/30 9:47 p.m.8 views

WordPress Borderless – Elementor Addons and Templates plugin <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Robert DeVore in WordPress Plugin Borderless versions = 1.7.1...

6.4CVSS5.5AI score0.00246EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder