Lucene search
K

18 matches found

RedhatCVE
RedhatCVE
added 2026/01/10 5:41 a.m.2 views

CVE-2025-68890

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hands01 e-shops e-shops-cart2 allows DOM-Based XSS.This issue affects e-shops: from n/a through = 1.0.4...

7.1CVSS5.9AI score0.00026EPSS
Exploits0References1
NVD
NVD
added 2026/01/08 10:15 a.m.2 views

CVE-2025-68890

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hands01 e-shops e-shops-cart2 allows DOM-Based XSS.This issue affects e-shops: from n/a through = 1.0.4...

7.1CVSS0.00026EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/08 9:17 a.m.2 views

CVE-2025-68890 WordPress e-shops plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hands01 e-shops e-shops-cart2 allows DOM-Based XSS.This issue affects e-shops: from n/a through = 1.0.4...

7.1CVSS6AI score0.00026EPSS
Exploits0References1
CVE
CVE
added 2026/01/08 9:17 a.m.6 views

CVE-2025-68890

CVE-2025-68890 is a DOM-based XSS in the hands01 e-shops e-shops-cart2 plugin (WordPress) caused by improper input neutralization during web-page generation, affecting versions from n/a through

7.1CVSS6AI score0.00026EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/08 9:17 a.m.25 views

CVE-2025-68890 WordPress e-shops plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hands01 e-shops e-shops-cart2 allows DOM-Based XSS.This issue affects e-shops: from n/a through = 1.0.4...

7.1CVSS0.00026EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.2 views

PT-2026-1928

Name of the Vulnerable Software and Affected Versions hands01 e-shops e-shops-cart2 versions through 1.0.4 Description The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to a DOM-Based Cross-Site Scripting XSS condition. The issue allows for the...

6.1CVSS5.9AI score0.00026EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/01/08 12:0 a.m.1 views

WordPress plugin e-shops 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

7.1CVSS5.9AI score0.00026EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/12/30 6:14 a.m.2 views

WordPress e-shops plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin e-shops versions = 1.0.4...

6.1CVSS6.1AI score0.00026EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-45583

Malicious code in bioql PyPI...

7.1CVSS6.4AI score0.00089EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 3:13 a.m.2 views

CVE-2024-51648

Cross-Site Request Forgery CSRF vulnerability in hands01 e-shops e-shops-cart2 allows Reflected XSS.This issue affects e-shops: from n/a through = 1.0.3...

7.1CVSS5.9AI score0.00089EPSS
Exploits0References1
NVD
NVD
added 2024/11/19 5:15 p.m.9 views

CVE-2024-51648

Cross-Site Request Forgery CSRF vulnerability in hands01 e-shops e-shops-cart2 allows Reflected XSS.This issue affects e-shops: from n/a through = 1.0.3...

7.1CVSS0.00089EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/19 4:32 p.m.12 views

CVE-2024-51648 WordPress e-shops plugin 1.0.3 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in hands01 e-shops e-shops-cart2 allows Reflected XSS.This issue affects e-shops: from n/a through = 1.0.3...

7.1CVSS5.9AI score0.00089EPSS
Exploits0References1
CVE
CVE
added 2024/11/19 4:32 p.m.42 views

CVE-2024-51648

CVE-2024-51648 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin “e-shops” (e-shops-cart2) version

7.1CVSS5.9AI score0.00089EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/19 4:32 p.m.26 views

CVE-2024-51648 WordPress e-shops plugin 1.0.3 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in hands01 e-shops e-shops-cart2 allows Reflected XSS.This issue affects e-shops: from n/a through = 1.0.3...

7.1CVSS0.00089EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/19 12:0 a.m.1 views

WordPress plugin e-shops 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

7.1CVSS6.4AI score0.00089EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/11/19 12:0 a.m.1 views

PT-2024-34792 · Eshop +1 · E-Shop +1

Name of the Vulnerable Software and Affected Versions: e-shops versions n/a through 1.0.3 WordPress e-Shops Plugin version 1.0.3 Description: A Cross-Site Request Forgery CSRF vulnerability allows Reflected XSS. This issue affects e-shops, enabling potential attacks. Users are urged to update to...

7.1CVSS7.2AI score0.00089EPSS
Exploits0References5
Patchstack
Patchstack
added 2024/11/01 10:36 a.m.1 views

WordPress e-shops plugin 1.0.3 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability

CSRF to Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin e-shops versions = 1.0.3...

7.1CVSS6.1AI score0.00089EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/11/01 12:0 a.m.11 views

WordPress e-shops Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software e-shops Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51648 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 41a29a656a44 Credits SOPROBRO Required privilege...

7.1CVSS6.6AI score0.00089EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder