Lucene search
K

6 matches found

CVE
CVE
added 2026/01/21 5:27 p.m.3 views

CVE-2021-47855

Openlitespeed 1.7.9 is affected by CVE-2021-47855, a stored cross-site scripting vulnerability in the dashboard Notes parameter. The issue allows an attacker to craft a payload in the Notes field during listener configuration that will execute when an administrator clicks the Default Icon, enabli...

7.2CVSS5.2AI score0.00052EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/01/21 5:27 p.m.14 views

CVE-2021-47855 Openlitespeed 1.7.9 - 'Notes' Stored Cross-Site Scripting

Openlitespeed 1.7.9 contains a stored cross-site scripting vulnerability in the dashboard's Notes parameter that allows administrators to inject malicious scripts. Attackers can craft a payload in the Notes field during listener configuration that will execute when an administrator clicks on the...

7.2CVSS0.00052EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/01/21 5:27 p.m.2 views

CVE-2021-47855 Openlitespeed 1.7.9 - 'Notes' Stored Cross-Site Scripting

Openlitespeed 1.7.9 contains a stored cross-site scripting vulnerability in the dashboard's Notes parameter that allows administrators to inject malicious scripts. Attackers can craft a payload in the Notes field during listener configuration that will execute when an administrator clicks on the...

7.2CVSS5.2AI score0.00052EPSS
Exploits0References3
EUVD
EUVD
added 2026/01/21 5:27 p.m.2 views

EUVD-2026-3632

Openlitespeed 1.7.9 contains a stored cross-site scripting vulnerability in the dashboard's Notes parameter that allows administrators to inject malicious scripts. Attackers can craft a payload in the Notes field during listener configuration that will execute when an administrator clicks on the...

7.2CVSS5.2AI score0.00052EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/01/21 12:0 a.m.3 views

PT-2026-3808

Openlitespeed 1.7.9 contains a stored cross-site scripting vulnerability in the dashboard's Notes parameter that allows administrators to inject malicious scripts. Attackers can craft a payload in the Notes field during listener configuration that will execute when an administrator clicks on the...

7.2CVSS5.2AI score0.00052EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/06/03 12:0 a.m.1 views

WordPress plugin VK Blocks 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

4.3CVSS6.5AI score0.00093EPSS
Exploits0References4
Rows per page
Query Builder