Lucene search
+L

6461 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/18 12:00 a.m.•5 views

CVE-2024-26080: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager versions 6.5.19 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable web pages. Malicious JavaScript may be executed in a victim’s browser when they browse to the pag...

5.4CVSS5.8AI score0.00427EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/18 12:00 a.m.•5 views

CVE-2024-26032: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager versions 6.5.19 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable web pages. Malicious JavaScript may be executed in a victim’s browser when they browse to the pag...

5.4CVSS6.3AI score0.0054EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/18 12:00 a.m.•5 views

CVE-2024-26064: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager versions 6.5.19 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into a webpage. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containin...

5.4CVSS6.3AI score0.0054EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/18 12:00 a.m.•7 views

CVE-2024-26044: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager versions 6.5.19 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into a webpage. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containin...

5.4CVSS6.3AI score0.0054EPSS
SaveExploits0References2
OSV
OSV
•added 2024/03/15 7:17 a.m.•30 views

BIT-ARTIFACTORY-2024-2247

JFrog Artifactory versions below 7.77.7, 7.82.1, are vulnerable to DOM-based cross-site scripting due to improper handling of the import override mechanism...

8.8CVSS7AI score0.00467EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/15 12:00 a.m.•5 views

CVE-2024-27193: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PayU India PayU India payu-india allows DOM-Based XSS.This issue affects PayU India: from n/a through = 3.8.8...

7.1CVSS5.8AI score0.00354EPSS
SaveExploits0References1
OSV
OSV
•added 2024/03/13 4:15 p.m.•21 views

CVE-2024-1038

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to DOM-Based Reflected Cross-Site Scripting via a 'playground.wordpress.net' parameter in all versions up to, and including, 2.7.4.2 due to insufficient input sanitization and output escaping. This makes it possible fo...

6.1CVSS7.4AI score0.00592EPSS
SaveExploits0References3
Prion
Prion
•added 2024/03/13 4:15 p.m.•33 views

Cross site scripting

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to DOM-Based Reflected Cross-Site Scripting via a 'playground.wordpress.net' parameter in all versions up to, and including, 2.7.4.2 due to insufficient input sanitization and output escaping. This makes it possible fo...

5.8CVSS6.7AI score0.00592EPSS
SaveExploits0References3
CVE
CVE
•added 2024/03/13 3:27 p.m.•108 views

CVE-2024-1038

The CVE-2024-1038 entry concerns Beaver Builder – WordPress Page Builder for WordPress with a DOM-Based Reflected Cross-Site Scripting vulnerability. Affected versions are up to 2.7.4.2, due to insufficient input sanitization and output escaping in the playground.wordpress.net parameter, enabling...

6.1CVSS5.5AI score0.00592EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2024/03/13 3:27 p.m.•45 views

CVE-2024-1038 Beaver Builder – WordPress Page Builder <= 2.7.4.2 - Reflected (DOM-Based) Cross-Site Scripting

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to DOM-Based Reflected Cross-Site Scripting via a 'playground.wordpress.net' parameter in all versions up to, and including, 2.7.4.2 due to insufficient input sanitization and output escaping. This makes it possible fo...

5.4CVSS5.5AI score0.00592EPSS
SaveExploits0References3
NVD
NVD
•added 2024/03/13 2:15 p.m.•27 views

CVE-2024-2247

JFrog Artifactory versions below 7.77.7, 7.82.1, are vulnerable to DOM-based cross-site scripting due to improper handling of the import override mechanism...

8.8CVSS8.4AI score0.00467EPSS
SaveExploits0References1
Prion
Prion
•added 2024/03/13 2:15 p.m.•31 views

Cross site scripting

JFrog Artifactory versions below 7.77.7, are vulnerable to DOM-based cross-site scripting due to improper handling of the import override mechanism...

6.8CVSS8.2AI score0.00467EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/13 2:06 p.m.•18 views

CVE-2024-2247 JFrog Artifactory Cross-Site Scripting

JFrog Artifactory versions below 7.77.7, 7.82.1, are vulnerable to DOM-based cross-site scripting due to improper handling of the import override mechanism...

8.8CVSS6.3AI score0.00467EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/13 2:06 p.m.•96 views

CVE-2024-2247

JFrog Artifactory is affected by a DOM-based cross-site scripting vulnerability in versions prior to 7.77.7 and 7.82.1, caused by improper handling of the import override mechanism. Impact: potential cross-site scripting via the vulnerable import override path. Affected software is Artifactory (A...

8.8CVSS8.4AI score0.00467EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/03/13 2:06 p.m.•31 views

CVE-2024-2247 JFrog Artifactory Cross-Site Scripting

JFrog Artifactory versions below 7.77.7, 7.82.1, are vulnerable to DOM-based cross-site scripting due to improper handling of the import override mechanism...

8.8CVSS8.5AI score0.00467EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2024/03/13 1:59 a.m.•78 views

Exploit for Cross-site Scripting in Html-Js Doracms

CVE-2024-28715 CVE ID CVE-2024-28715 PRODUCT Do...

8.8CVSS7.7AI score0.01071EPSS
SaveExploits1
CNNVD
CNNVD
•added 2024/03/13 12:00 a.m.•15 views

WordPress Plugin Beaver Builder Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.1CVSS6.8AI score0.00592EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/03/13 12:00 a.m.•16 views

JFrog Artifactory Cross-Site Scripting Vulnerability

JFrog Artifactory is an open source, general-purpose Artifact repository manager from Israel's JFrog that supports clustering and high-availability Docker registries, and provides an end-to-end automation solution for tracking artifacts from development to production. A cross-site scripting...

8.8CVSS6.1AI score0.00467EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/13 12:00 a.m.•2 views

CVE-2024-1038: Improper Neutralization of Input During Web Page Generation

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to DOM-Based Reflected Cross-Site Scripting via a 'playground.wordpress.net' parameter in all versions up to, and including, 2.7.4.2 due to insufficient input sanitization and output escaping. This makes it possible fo...

6.1CVSS5.9AI score0.00592EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/13 12:00 a.m.•5 views

CVE-2024-2247: Improper Neutralization of Input During Web Page Generation

JFrog Artifactory versions below 7.77.7, 7.82.1, are vulnerable to DOM-based cross-site scripting due to improper handling of the import override mechanism...

8.8CVSS5.6AI score0.00467EPSS
SaveExploits0References2
Rows per page
Query Builder