Lucene search
+L

857 matches found

Cvelist
Cvelist
added 2025/01/31 8:24 a.m.28 views

CVE-2025-24535 WordPress SKT Donation plugin <= 1.9 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sonalsinha21 SKT Donation skt-donation allows Reflected XSS.This issue affects SKT Donation: from n/a through = 1.9...

7.1CVSS0.0025EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/31 12:00 a.m.9 views

WordPress plugin Paytm Payment Donation 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

7.1CVSS6.2AI score0.00255EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/31 12:00 a.m.11 views

PT-2025-5463 · Paytm · Paytm Payment Donation

Name of the Vulnerable Software and Affected Versions: Paytm Payment Donation versions n/a through 2.3.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For versions n/a...

7.1CVSS7.1AI score0.00255EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/01/31 12:00 a.m.7 views

WordPress plugin SKT Donation 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

7.1CVSS6.2AI score0.0025EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/28 12:00 a.m.9 views

WordPress plugin Philantr 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

6.4CVSS8.2AI score0.0022EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/01/24 11:15 a.m.4 views

CVE-2025-23621

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in algothemes Causes – Donation Plugin causes allows Reflected XSS.This issue affects Causes – Donation Plugin: from n/a through = 1.0.01...

7.1CVSS7.2AI score0.00228EPSS
SaveExploits0References3
NVD
NVD
added 2025/01/24 11:15 a.m.28 views

CVE-2025-23621

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in algothemes Causes – Donation Plugin causes allows Reflected XSS.This issue affects Causes – Donation Plugin: from n/a through = 1.0.01...

7.1CVSS0.00228EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/24 10:52 a.m.7 views

CVE-2025-23621 WordPress Causes – Donation plugin <= 1.0.01 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Causes – Donation Plugin allows Reflected XSS. This issue affects Causes – Donation Plugin: from n/a through 1.0.01...

7.1CVSS6.9AI score0.00228EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/24 10:52 a.m.27 views

CVE-2025-23621 WordPress Causes – Donation plugin <= 1.0.01 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in algothemes Causes – Donation Plugin causes allows Reflected XSS.This issue affects Causes – Donation Plugin: from n/a through = 1.0.01...

7.1CVSS0.00228EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/24 10:52 a.m.63 views

CVE-2025-23621

CVE-2025-23621 is a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Causes – Donation Plugin (Causes) limited to versions 1.0.01 and earlier. The issue stems from improper input neutralization during web page generation, enabling attacker-supplied input to be reflected ...

7.1CVSS7.2AI score0.00228EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/24 12:00 a.m.10 views

PT-2025-4979 · Unknown · Causes – Donation Plugin

Name of the Vulnerable Software and Affected Versions: Causes – Donation Plugin versions 1.0.01 and below Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables attackers to inject...

7.1CVSS9.3AI score0.00228EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/01/24 12:00 a.m.13 views

WordPress plugin Causes – Donation Plugin 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers. WordPress plugin Causes - A...

7.1CVSS7.4AI score0.00228EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/01/16 6:41 p.m.9 views

WordPress Causes – Donation plugin <= 1.0.01 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh in WordPress Plugin Causes – Donation Plugin versions = 1.0.01...

7.1CVSS6.1AI score0.00228EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/01/11 8:15 a.m.44 views

CVE-2024-12877

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.19.2 via deserialization of untrusted input from the donation form like 'firstName'. This makes it possible for unauthenticated attackers to...

9.8CVSS0.01257EPSS
SaveExploits1References2
OSV
OSV
added 2025/01/11 8:15 a.m.10 views

CVE-2024-12877

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.19.2 via deserialization of untrusted input from the donation form like 'firstName'. This makes it possible for unauthenticated attackers to...

9.8CVSS7.9AI score0.01257EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/01/11 12:00 a.m.16 views

PT-2025-1974 · Givewp · Givewp

Name of the Vulnerable Software and Affected Versions: GiveWP – Donation Plugin and Fundraising Platform versions up to 3.19.2 Description: The issue allows unauthenticated attackers to inject a PHP Object via deserialization of untrusted input from the donation form, such as the firstName field...

9.8CVSS9.9AI score0.01257EPSS
SaveExploits1References10
NVD
NVD
added 2025/01/07 4:15 p.m.9 views

CVE-2025-22525

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bharat Kambariya Donation Block For PayPal donations-block allows Stored XSS.This issue affects Donation Block For PayPal: from n/a through = 2.2.0...

6.5CVSS0.00352EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/07 2:57 p.m.6 views

CVE-2025-22525 WordPress Donation Block For PayPal Plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bharatkambariya Donation Block For PayPal allows Stored XSS.This issue affects Donation Block For PayPal: from n/a through 2.2.0...

6.5CVSS6.8AI score0.00352EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/07 2:57 p.m.26 views

CVE-2025-22525 WordPress Donation Block For PayPal Plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bharat Kambariya Donation Block For PayPal donations-block allows Stored XSS.This issue affects Donation Block For PayPal: from n/a through = 2.2.0...

6.5CVSS0.00352EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/07 2:57 p.m.49 views

CVE-2025-22525

CVE-2025-22525 affects the Donation Block For PayPal WordPress plugin. It is described as an stored XSS vulnerability (Cross-site Scripting) due to improper neutralization of input during web page generation, impacting Donation Block For PayPal versions up to 2.2.0. The connected Red Hat/Wordfenc...

6.5CVSS7.2AI score0.00352EPSS
SaveExploits0References1
Rows per page
Query Builder