Lucene search
+L

4 matches found

CNVD
CNVD
•added 2021/12/19 12:00 a.m.•58 views

WordPress duoFAQ - Responsive, Flat, Simple FAQ plugin cross-site scripting vulnerability

duoFAQ - Responsive, Flat, Simple FAQ plugin is a WordPress open source application plugin. duoFAQ - Responsive, Flat, Simple FAQ plugin for WordPress suffers from a cross-site scripting vulnerability. The vulnerability stems from a lack of data validation filtering of user-supplied data and...

6.1CVSS1.9AI score0.00782EPSS
SaveExploits0References1
NVD
NVD
•added 2021/12/14 4:15 p.m.•36 views

CVE-2021-39319

The duoFAQ - Responsive, Flat, Simple FAQ WordPess plugin is vulnerable to Reflected Cross-Site Scripting via the msg parameter found in the /duogeek/duogeek-panel.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.4.8...

6.1CVSS0.00782EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/14 12:00 a.m.•9 views

CVE-2021-39319: Improper Neutralization of Input During Web Page Generation

The duoFAQ - Responsive, Flat, Simple FAQ WordPess plugin is vulnerable to Reflected Cross-Site Scripting via the msg parameter found in the /duogeek/duogeek-panel.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.4.8...

6.1CVSS5.7AI score0.00782EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/12/14 12:00 a.m.•11 views

PT-2021-22528

Name of the Vulnerable Software and Affected Versions: duoFAQ versions up to and including 1.4.8 Description: The issue allows attackers to inject arbitrary web scripts via the msg parameter found in the /duogeek/duogeek-panel.php file, enabling Reflected Cross-Site Scripting attacks...

6.1CVSS0.00782EPSS
SaveExploits0References5
Rows per page
Query Builder