Lucene search
+L

44 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 8:49 a.m.•12 views

CVE-2025-23786

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DuoGeek Email to Download email-to-download allows Reflected XSS.This issue affects Email to Download: from n/a through = 3.1.0...

7.1CVSS8.1AI score0.00308EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2024-45658

Malicious code in bioql PyPI...

6.5CVSS8.6AI score0.00297EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2024-45665

Malicious code in bioql PyPI...

6.5CVSS8.6AI score0.00297EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2024-45451

Malicious code in bioql PyPI...

6.5CVSS6.4AI score0.00248EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2024-52922

Malicious code in bioql PyPI...

7.1CVSS8.7AI score0.00354EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2025-3418

Malicious code in bioql PyPI...

7.1CVSS7.9AI score0.00308EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2024-45657

Malicious code in bioql PyPI...

6.5CVSS8.6AI score0.00325EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 8:05 a.m.•10 views

CVE-2024-51861

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DuoGeek EventPress wp-eventpress allows Stored XSS.This issue affects EventPress: from n/a through = 1.0.0...

6.5CVSS7.2AI score0.00297EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 8:03 a.m.•16 views

CVE-2024-51868

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tapan Kumer Das DuoGeek Blocks duogeek-blocks allows Stored XSS.This issue affects DuoGeek Blocks: from n/a through 0.1.1...

6.5CVSS7.2AI score0.00297EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 6:39 a.m.•16 views

CVE-2024-51860

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DuoGeek Custom Dashboard Widget create-custom-dashboard-widget allows Stored XSS.This issue affects Custom Dashboard Widget: from n/a through = 1.0.0...

6.5CVSS7.2AI score0.00325EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 6:26 a.m.•15 views

CVE-2024-51618

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DuoGeek Custom Admin Menu custom-admin-menu allows Stored XSS.This issue affects Custom Admin Menu: from n/a through = 1.0.0...

6.5CVSS5.9AI score0.00248EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/14 1:15 p.m.•25 views

CVE-2025-23786

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DuoGeek Email to Download email-to-download allows Reflected XSS.This issue affects Email to Download: from n/a through = 3.1.0...

7.1CVSS0.00308EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/14 12:44 p.m.•69 views

CVE-2025-23786

CVE-2025-23786 is a reflected XSS vulnerability in the WordPress plugin Email to Download (vulnerable up to 3.1.0). The issue is caused by improper neutralization of user input during web page generation, enabling an attacker to inject executable script via input that is reflected in the page. Pu...

7.1CVSS7.2AI score0.00308EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/14 12:00 a.m.•8 views

CVE-2025-23786: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DuoGeek Email to Download email-to-download allows Reflected XSS.This issue affects Email to Download: from n/a through = 3.1.0...

7.1CVSS5.8AI score0.00308EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/14 12:00 a.m.•8 views

PT-2025-7007

Name of the Vulnerable Software and Affected Versions: DuoGeek Email to Download versions n/a through 3.1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attacker...

7.1CVSS0.00308EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/02/05 9:18 a.m.•16 views

CVE-2024-56024

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DuoGeek Custom Dashboard Widget create-custom-dashboard-widget allows Reflected XSS.This issue affects Custom Dashboard Widget: from n/a through = 1.0.0...

7.1CVSS7.2AI score0.00354EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/02 12:15 p.m.•28 views

CVE-2024-56024

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DuoGeek Custom Dashboard Widget create-custom-dashboard-widget allows Reflected XSS.This issue affects Custom Dashboard Widget: from n/a through = 1.0.0...

7.1CVSS0.00354EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/02 12:01 p.m.•8 views

CVE-2024-56024 WordPress Custom Dashboard Widget plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DuoGeek Custom Dashboard Widget allows Reflected XSS.This issue affects Custom Dashboard Widget: from n/a through 1.0.0...

7.1CVSS7.2AI score0.00354EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/02 12:00 a.m.•6 views

CVE-2024-56024: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DuoGeek Custom Dashboard Widget create-custom-dashboard-widget allows Reflected XSS.This issue affects Custom Dashboard Widget: from n/a through = 1.0.0...

7.1CVSS5.8AI score0.00354EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/19 5:15 p.m.•15 views

CVE-2024-51868

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tapan Kumer Das DuoGeek Blocks duogeek-blocks allows Stored XSS.This issue affects DuoGeek Blocks: from n/a through 0.1.1...

6.5CVSS0.00297EPSS
SaveExploits0References1
Rows per page
Query Builder