27726 matches found
CVE-2021-32859
The Baremetrics date range picker is a solution for selecting both date ranges and single dates from a single calender view. Versions 1.0.14 and prior are prone to cross-site scripting XSS when handling untrusted placeholder entries. An attacker who is able to influence the field placeholder when...
CVE-2021-42121
Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version = 7.1.27 on an object’s date attributes allows an authenticated remote attacker with Object Modification privileges to insert an unexpected format into date fields, which leads t...
CVE-2021-24442
The Poll, Survey, Questionnaire and Voting system WordPress plugin before 1.5.3 did not sanitise, escape or validate the dateanswers POST parameter before using it in a SQL statement when sending a Poll result, allowing unauthenticated users to perform SQL Injection attacks...
CVE-2021-38702
Cyberoam NetGenie C0101B1-20141120-NG11VO devices through 2021-08-14 allow tweb/ft.php?u=XSS attacks...
CVE-2024-7487
creationtimestamp| type| source ---|---|--- 2025-05-22 19:45:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17349 2025-05-22 23:53:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpscrt3g4h2s...
CVE-2022-35246
creationtimestamp| type| source ---|---|--- 2025-05-22 19:45:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17341...
CVE-2025-30173
creationtimestamp| type| source ---|---|--- 2025-05-22 19:45:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpruvw3skg2r...
CVE-2021-24866
The WP Data Access WordPress plugin before 5.0.0 does not properly sanitise and escape the backupdate parameter before using it a SQL statement, leading to a SQL injection issue and could allow arbitrary table deletion...
CVE-2021-24842
The Bulk Datetime Change WordPress plugin before 1.12 does not enforce capability checks which allows users with Contributor roles to 1 list private post titles of other users and 2 change the posted date of other users' posts...
CVE-2024-13929
creationtimestamp| type| source ---|---|--- 2025-05-22 19:20:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lprtj7csk42q...
CVE-2024-48850
creationtimestamp| type| source ---|---|--- 2025-05-22 17:43:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17340...
CVE-2025-2410
creationtimestamp| type| source ---|---|--- 2025-05-22 17:43:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17335 2025-05-22 19:58:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lprvncrvwp2j...
GHSA-45JJ-R48J-75PP
creationtimestamp| type| source ---|---|--- 2025-05-22 17:43:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17334...
CVE-2020-35262
Cross Site Scripting XSS vulnerability in Digisol DG-HR3400 can be exploited via the NTP server name in Time and date module and "Keyword" in URL Filter...
CVE-2020-8594
The Ninja Forms plugin 3.4.22 for WordPress has Multiple Stored XSS vulnerabilities via ninjaformsrecaptchasitekey, ninjaformsrecaptchasecretkey, ninjaformsrecaptchalang, or ninjaformsdateformat...
CVE-2023-7890
creationtimestamp| type| source ---|---|--- 2025-05-22 16:51:14+00:00| seen| https://gist.github.com/falconwebsites/099fbf1928b96af4c5e40d257675ebab...
CVE-2025-5080
creationtimestamp| type| source ---|---|--- 2025-05-22 16:49:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lprl4r5x7q2s 2025-05-22 21:39:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114553647829958146...
CVE-2025-23182
creationtimestamp| type| source ---|---|--- 2025-05-22 16:44:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17314...
CVE-2018-14781
creationtimestamp| type| source ---|---|--- 2025-05-22 16:43:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17305...
CVE-2025-3945
creationtimestamp| type| source ---|---|--- 2025-05-22 15:52:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lprhwnyjv32y 2025-08-07 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-219-02...