Lucene search
+L

20 matches found

Nuclei
Nuclei
•added 2026/10/19 2:08 a.m.•75 views

WordPress Easy Social Icons Plugin < 3.0.9 - Cross-Site Scripting

The Easy Social Icons plugin = 3.0.8 for WordPress echoes out the raw value of $SERVER'PHPSELF' in its main file. On certain configurations including Apache+modPHP this makes it possible to use it to perform a reflected cross-site scripting attack by injecting malicious code in the request path...

6.1CVSS6.2AI score0.02349EPSS
SaveExploits2References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2024-19850

Malicious code in bioql PyPI...

7.1CVSS6.9AI score0.00334EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2023-52392

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00377EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/04 11:51 p.m.•17 views

CVE-2024-22289

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CyberNetikz Post views Stats post-views-stats allows DOM-Based XSS.This issue affects Post views Stats: from n/a through = 1.4.1...

7.1CVSS6.8AI score0.00334EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/13 3:15 p.m.•49 views

CVE-2023-33998

Missing Authorization vulnerability in cybernetikz Easy Social Icons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Social Icons: from n/a through 3.2.5...

4.3CVSS0.00422EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2024/12/13 3:15 p.m.•60 views

CVE-2023-33998

Missing Authorization vulnerability in CyberNetikz Easy Social Icons easy-social-icons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Social Icons: from n/a through = 3.2.5...

4.3CVSS5.8AI score0.00422EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•7 views

CVE-2023-33998: Missing Authorization

Missing Authorization vulnerability in cybernetikz Easy Social Icons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Social Icons: from n/a through 3.2.5...

4.3CVSS5.9AI score0.00422EPSS
SaveExploits0References1
NVD
NVD
•added 2024/01/31 6:15 p.m.•28 views

CVE-2024-22289

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CyberNetikz Post views Stats post-views-stats allows DOM-Based XSS.This issue affects Post views Stats: from n/a through = 1.4.1...

7.1CVSS6.9AI score0.00334EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/01/31 6:15 p.m.•17 views

CVE-2024-22289

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cybernetikz Post views Stats allows Reflected XSS.This issue affects Post views Stats: from n/a through 1.3...

6.1CVSS7.3AI score0.00334EPSS
SaveExploits0References1
Prion
Prion
•added 2024/01/31 6:15 p.m.•31 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cybernetikz Post views Stats allows Reflected XSS.This issue affects Post views Stats: from n/a through 1.3...

5.8CVSS7.1AI score0.00334EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2024/01/31 5:47 p.m.•72 views

CVE-2024-22289

CVE-2024-22289 affects the WordPress Post views Stats plugin. It describes a Reflected XSS in Post views Stats

7.1CVSS6.8AI score0.00334EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/31 12:00 a.m.•5 views

CVE-2024-22289: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CyberNetikz Post views Stats post-views-stats allows DOM-Based XSS.This issue affects Post views Stats: from n/a through = 1.4.1...

7.1CVSS5.8AI score0.00334EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/01/31 12:00 a.m.•4 views

PT-2024-19310

Name of the Vulnerable Software and Affected Versions cybernetikz Post views Stats versions n/a through 1.3 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS in cybernetikz Post views...

7.1CVSS5.8AI score0.00334EPSS
SaveExploits0References6
NVD
NVD
•added 2023/11/30 11:15 a.m.•27 views

CVE-2023-48336

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cybernetikz Easy Social Icons allows Stored XSS.This issue affects Easy Social Icons: from n/a through 3.2.4...

6.5CVSS0.00377EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/11/30 10:36 a.m.•39 views

CVE-2023-48336 WordPress Easy Social Icons Plugin <= 3.2.4 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cybernetikz Easy Social Icons allows Stored XSS.This issue affects Easy Social Icons: from n/a through 3.2.4...

6.5CVSS6.6AI score0.00377EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/11/30 12:00 a.m.•5 views

PT-2023-30795

Name of the Vulnerable Software and Affected Versions cybernetikz Easy Social Icons versions 3.2.4 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means that an attacker can inject...

6.5CVSS5.7AI score0.00377EPSS
SaveExploits0References6
zdt
zdt
•added 2015/02/23 12:00 a.m.•31 views

WordPress Easy Social Icons Plugin 1.2.2 - CSRF Vulnerability

Exploit for php platform in category web applications ==================================================== Product: Easy Social Icons WordPress plugin Vendor: CyberNetikz Tested Version: 1.2.2 Vulnerability Type: XSS CWE-79 and CSRF CWE-352 Risk Level: Medium Solution Status: Solved in version...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2015/02/23 12:00 a.m.•29 views

WordPress Plugin Easy Social Icons 1.2.2 - Cross-Site Request Forgery

WordPress Plugin Easy Social Icons 1.2.2 - Cross-Site Request Forgery ==================================================== Product: Easy Social Icons WordPress plugin Vendor: CyberNetikz Tested Version: 1.2.2 Vulnerability Type: XSS CWE-79 and CSRF CWE-352 Risk Level: Medium Solution Status: Solv...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2015/02/23 12:00 a.m.•60 views

WordPress Plugin Easy Social Icons 1.2.2 - Cross-Site Request Forgery

==================================================== Product: Easy Social Icons WordPress plugin Vendor: CyberNetikz Tested Version: 1.2.2 Vulnerability Type: XSS CWE-79 and CSRF CWE-352 Risk Level: Medium Solution Status: Solved in version 1.2.3 Discovered and Provided: Eric Flokstra - ITsec...

6.8CVSS5.2AI score0.02621EPSS
SaveExploits2
Packet Storm
Packet Storm
•added 2015/02/19 12:00 a.m.•53 views

WordPress Easy Social Icons 1.2.2 CSRF / XSS

==================================================== Product: Easy Social Icons WordPress plugin Vendor: CyberNetikz Tested Version: 1.2.2 Vulnerability Type: XSS CWE-79 and CSRF CWE-352 Risk Level: Medium Solution Status: Solved in version 1.2.3 Discovered and Provided: Eric Flokstra - ITsec...

0.2AI score
SaveExploits0
Rows per page
Query Builder