Lucene search
+L

60 matches found

NVD
NVD
•added 2025/05/15 8:15 p.m.•10 views

CVE-2024-13621

The GDPR Framework By Data443 WordPress plugin before 2.2.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS0.00312EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/15 12:00 a.m.•2 views

CVE-2024-13621: Improper Neutralization of Input During Web Page Generation

The GDPR Framework By Data443 WordPress plugin before 2.2.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.9AI score0.00312EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/05/15 12:00 a.m.•14 views

WordPress plugin GDPR Framework By Data443 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

4.8CVSS4.9AI score0.00312EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/09 3:25 p.m.•20 views

CVE-2025-47604

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Data443 Risk Mitigation, Inc. Inline Related Posts intelly-related-posts allows Stored XSS.This issue affects Inline Related Posts: from n/a through = 3.8.0...

6.5CVSS7.2AI score0.00294EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/07 3:16 p.m.•22 views

CVE-2025-47604

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Data443 Risk Mitigation, Inc. Inline Related Posts intelly-related-posts allows Stored XSS.This issue affects Inline Related Posts: from n/a through = 3.8.0...

6.5CVSS0.00294EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/07 2:20 p.m.•72 views

CVE-2025-47604

CVE-2025-47604 concerns a Stored XSS vulnerability in the WordPress plugin Inline Related Posts by Data443 Risk Mitigation, Inc. The issue stems from improper neutralization of input during web page generation, affecting Inline Related Posts versions up to 3.8.0 . Public documents describe the vu...

6.5CVSS7.2AI score0.00294EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/05/07 2:20 p.m.•37 views

CVE-2025-47604 WordPress Inline Related Posts plugin <= 3.8.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Data443 Risk Mitigation, Inc. Inline Related Posts intelly-related-posts allows Stored XSS.This issue affects Inline Related Posts: from n/a through = 3.8.0...

6.5CVSS0.00294EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/07 2:20 p.m.•14 views

CVE-2025-47604 WordPress Inline Related Posts <= 3.8.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Data443 Risk Migitation, Inc. Inline Related Posts allows Stored XSS. This issue affects Inline Related Posts: from n/a through 3.8.0...

6.5CVSS6.4AI score0.00294EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/07 12:00 a.m.•24 views

PT-2025-20176 · Data443 Risk Mitigation · Inline Related Posts

Name of the Vulnerable Software and Affected Versions: Data443 Risk Migitation, Inc. Inline Related Posts versions n/a through 3.8.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS in...

6.5CVSS6.5AI score0.00294EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/07 12:00 a.m.•4 views

CVE-2025-47604: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Data443 Risk Mitigation, Inc. Inline Related Posts intelly-related-posts allows Stored XSS.This issue affects Inline Related Posts: from n/a through = 3.8.0...

6.5CVSS5.8AI score0.00294EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/06 5:04 p.m.•30 views

CVE-2025-32129

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Data443 Risk Mitigation, Inc. Welcome Bar intelly-welcome-bar allows Stored XSS.This issue affects Welcome Bar: from n/a through = 2.0.4...

5.9CVSS7.2AI score0.00408EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/06 5:03 p.m.•33 views

CVE-2025-32130

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Data443 Risk Mitigation, Inc. Posts Footer Manager intelly-posts-footer-manager allows Stored XSS.This issue affects Posts Footer Manager: from n/a through = 2.2.0...

5.9CVSS7.2AI score0.00408EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/04 4:15 p.m.•16 views

CVE-2025-32130

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Data443 Risk Mitigation, Inc. Posts Footer Manager intelly-posts-footer-manager allows Stored XSS.This issue affects Posts Footer Manager: from n/a through = 2.2.0...

5.9CVSS0.00408EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/04 4:15 p.m.•18 views

CVE-2025-32129

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Data443 Risk Mitigation, Inc. Welcome Bar intelly-welcome-bar allows Stored XSS.This issue affects Welcome Bar: from n/a through = 2.0.4...

5.9CVSS0.00408EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/04 3:58 p.m.•12 views

CVE-2025-32130 WordPress Posts Footer Manager plugin <= 2.2.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Data443 Risk Migitation, Inc. Posts Footer Manager allows Stored XSS. This issue affects Posts Footer Manager: from n/a through 2.2.0...

5.9CVSS6.9AI score0.00408EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/04 3:58 p.m.•30 views

CVE-2025-32129 WordPress Welcome Bar plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Data443 Risk Mitigation, Inc. Welcome Bar intelly-welcome-bar allows Stored XSS.This issue affects Welcome Bar: from n/a through = 2.0.4...

5.9CVSS0.00408EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/04 3:58 p.m.•27 views

CVE-2025-32130 WordPress Posts Footer Manager plugin <= 2.2.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Data443 Risk Mitigation, Inc. Posts Footer Manager intelly-posts-footer-manager allows Stored XSS.This issue affects Posts Footer Manager: from n/a through = 2.2.0...

5.9CVSS0.00408EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/04 12:00 a.m.•19 views

PT-2025-14921 · Data443 Risk Mitigation · Posts Footer Manager

Name of the Vulnerable Software and Affected Versions: Data443 Risk Migitation, Inc. Posts Footer Manager versions n/a through 2.2.0 Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting XSS. Specifically, it is a Stor...

5.9CVSS8.7AI score0.00408EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/04/04 12:00 a.m.•23 views

PT-2025-14920 · Data443 Risk Mitigation · Welcome Bar

Name of the Vulnerable Software and Affected Versions: Data443 Risk Migitation, Inc. Welcome Bar versions through 2.0.4 Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting XSS. Specifically, it is a Stored XSS...

5.9CVSS6.1AI score0.00408EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/04 12:00 a.m.•3 views

CVE-2025-32129: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Data443 Risk Mitigation, Inc. Welcome Bar intelly-welcome-bar allows Stored XSS.This issue affects Welcome Bar: from n/a through = 2.0.4...

5.9CVSS5.8AI score0.00408EPSS
SaveExploits0References1
Rows per page
Query Builder