Lucene search
+L

27 matches found

Patchstack
Patchstack
added 2024/11/25 12:0 a.m.26 views

WordPress Parsi Date Plugin <= 5.1.1 is vulnerable to Cross Site Scripting (XSS)

Software Parsi Date Type Plugin Vulnerable versions = 5.1.1 Fixed in 5.1.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11032 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID be0cd10da0f9 Credits vgo0 Required privileg...

6.1CVSS5.6AI score0.00449EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/19 4:32 p.m.10 views

CVE-2024-52388 WordPress Hebrew Date plugin <= 2.1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Mike “Mikeage” Miller Hebrew Date allows Stored XSS.This issue affects Hebrew Date: from n/a through 2.1.0...

7.1CVSS7AI score0.00171EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/11/11 12:0 a.m.15 views

WordPress Hebrew Date Plugin <= 2.1.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Hebrew Date Type Plugin Vulnerable versions = 2.1.0 Fixed in 2.3.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-52388 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 3e9ff928d1fa Credits SOPROBRO Required...

7.1CVSS6.6AI score0.00171EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/10/04 12:0 a.m.8 views

WordPress plugin Product Delivery Date for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.1CVSS6.1AI score0.00364EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2024/03/14 12:0 a.m.16 views

Fedora 38 : rust-routinator (2024-28a151028a)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-28a151028a advisory. from changelog: Fix the RTR listener so that Routinator wont exit if an incoming RTR connection is closed again too quickly. 937, reported by Yohei Nishimura...

7.5CVSS7.4AI score0.01004EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/10/10 12:0 a.m.10 views

WordPress Plugin Order Delivery Date for WP e-Commerce Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

8.8CVSS6.6AI score0.00214EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
added 2023/01/23 12:0 a.m.11 views

Parsi Date < 4.0.2 - Reflected Cross-Site Scripting

The plugin does not escape generated URLs before outputing them in attrubutes, leading to Reflected Cross-Site Scripting...

1.6AI score
SaveExploits0Affected Software1
Rows per page
Query Builder