Lucene search
K

12 matches found

RedhatCVE
RedhatCVE
added 2026/01/24 3:17 a.m.8 views

CVE-2025-70458

A DOM-based Cross-Site Scripting XSS vulnerability exists in the DomainCheckerApp class within domain/script.js of Sourcecodester Domain Availability Checker v1.0. The vulnerability occurs because the application improperly handles user-supplied data in the createResultElement method by using the...

5.4CVSS5.5AI score0.00195EPSS
Exploits1References1
NVD
NVD
added 2026/01/23 10:16 p.m.8 views

CVE-2025-70458

A DOM-based Cross-Site Scripting XSS vulnerability exists in the DomainCheckerApp class within domain/script.js of Sourcecodester Domain Availability Checker v1.0. The vulnerability occurs because the application improperly handles user-supplied data in the createResultElement method by using the...

5.4CVSS0.00195EPSS
Exploits1References2
EUVD
EUVD
added 2026/01/23 12:0 a.m.4 views

EUVD-2025-206330

A DOM-based Cross-Site Scripting XSS vulnerability exists in the DomainCheckerApp class within domain/script.js of Sourcecodester Domain Availability Checker v1.0. The vulnerability occurs because the application improperly handles user-supplied data in the createResultElement method by using the...

5.5AI score0.00195EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/01/23 12:0 a.m.1 views

CVE-2025-70458

A DOM-based Cross-Site Scripting XSS vulnerability exists in the DomainCheckerApp class within domain/script.js of Sourcecodester Domain Availability Checker v1.0. The vulnerability occurs because the application improperly handles user-supplied data in the createResultElement method by using the...

5.4CVSS5.9AI score0.00195EPSS
Exploits1References3
CVE
CVE
added 2026/01/23 12:0 a.m.11 views

CVE-2025-70458

CVE-2025-70458 affects Sourcecodester Domain Availability Checker v1.0. The DOM-based XSS exists in DomainCheckerApp (domain/script.js) where createResultElement uses unsafe innerHTML to render domain search results, enabling injection. CVSS 3.1 base score 5.4 (MEDIUM). Remediation: update to a f...

5.4CVSS5.5AI score0.00195EPSS
Exploits1References2Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-51905

Malicious code in bioql PyPI...

6.5CVSS6.7AI score0.00416EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/01/11 12:0 a.m.3 views

PT-2025-1881 · WordPress · The Dominion – Domain Checker

Name of the Vulnerable Software and Affected Versions: The Dominion – Domain Checker for WPBakery plugin for WordPress versions up to, and including, 2.2.2 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied...

6.4CVSS6.2AI score0.00306EPSS
Exploits0References6
OSV
OSV
added 2023/11/22 11:15 p.m.0 views

CVE-2023-47810

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Asdqwe Dev Ajax Domain Checker plugin = 1.3.0 versions...

5.4CVSS7.3AI score0.00416EPSS
Exploits1References1
NVD
NVD
added 2023/11/22 11:15 p.m.14 views

CVE-2023-47810

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Asdqwe Dev Ajax Domain Checker plugin = 1.3.0 versions...

6.5CVSS0.00416EPSS
Exploits1References1
CVE
CVE
added 2023/11/22 10:19 p.m.71 views

CVE-2023-47810

CVE-2023-47810 affects the WordPress Ajax Domain Checker plugin up to version 1.3.0. Root cause: improper neutralization of input during web page generation, leading to Stored Cross‑Site Scripting (XSS) as described in multiple sources. Exploitation context from connected docs indicates the vulne...

6.5CVSS6AI score0.00416EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2023/11/22 12:0 a.m.3 views

WordPress Plugin Ajax Domain Checker Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.5CVSS6AI score0.00416EPSS
Exploits1References3
Patchstack
Patchstack
added 2023/11/15 12:0 a.m.13 views

WordPress Ajax Domain Checker Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

Software Ajax Domain Checker Type Plugin Vulnerable versions = 1.3.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-47810 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 221e73a9646b Credits Ngô Thiên An ancorn from VNPT-VCI...

6.5CVSS6.6AI score0.00416EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder