3 matches found
WordPress Global Meta Keyword & Description plugin <= 2.3 - CSRF to Cross-Site Scripting vulnerability
CSRF to Cross-Site Scripting vulnerability discovered by Abdi Pranata in WordPress Plugin Global Meta Keyword & Description versions = 2.3...
7.1CVSS6.4AI score0.00141EPSS
SaveExploits0Affected Software1
CVE-2020-2266
CVE-2020-2266 affects Jenkins Description Column Plugin 1.3 and earlier. The vulnerability arises from insufficient escaping of the job description in the column tooltip, enabling stored cross-site scripting (XSS) exploitable by attackers with Job/Configure permission. Affected software: Jenkins ...
5.4CVSS5.2AI score0.00735EPSS
SaveExploits0References2Affected Software1
20