Lucene search
+L

173 matches found

OSV
OSV
•added 2024/03/19 3:15 p.m.•17 views

CVE-2024-29114

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in W3 Eden, Inc. Download Manager allows Stored XSS.This issue affects Download Manager: from n/a through 3.2.84...

5.4CVSS5.8AI score0.00337EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/19 3:15 p.m.•31 views

CVE-2024-29114

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in W3 Eden, Inc. Download Manager allows Stored XSS.This issue affects Download Manager: from n/a through 3.2.84...

6.5CVSS6.4AI score0.00337EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/19 2:58 p.m.•50 views

CVE-2024-29114 WordPress Download Manager plugin <= 3.2.84 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in W3 Eden, Inc. Download Manager allows Stored XSS.This issue affects Download Manager: from n/a through 3.2.84...

6.5CVSS6.6AI score0.00337EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/19 2:58 p.m.•102 views

CVE-2024-29114

CVE-2024-29114 is a Stored XSS in the WordPress Download Manager plugin (Download Manager Pro). Affected: Download Manager from n/a up to version 3.2.84. The vulnerability is addressed in patched builds; remediation is to upgrade to a fixed release.

6.5CVSS8.6AI score0.00337EPSS
SaveExploits0References1Affected Software1
Openbugbounty
Openbugbounty
•added 2024/01/07 3:32 a.m.•9 views

gardenofedengardencenter.com Improper Access Control vulnerability OBB-3829420

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2023/08/14 12:00 a.m.•279 views

Eden CMS 1.02 Cross Site Scripting

==================================================================================================================================== | Title : Eden CMS v1.02 Xss Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 64.0.2 32-bit | | Vendor :...

7.1AI score
SaveExploits0
Wordfence Blog
Wordfence Blog
•added 2023/05/22 2:49 p.m.•58 views

W3 Eden Addresses Authenticated Stored XSS Vulnerability in Download Manager WordPress Plugin

On April 25, 2023, our Wordfence Threat Intelligence team identified and began the responsible disclosure process for a stored Cross-Site Scripting XSS vulnerability in W3 Eden’s Download Manager plugin, which is actively installed on more than 100,000 WordPress websites, making it one of the mos...

4.9CVSS6AI score0.00646EPSS
SaveExploits2
Packet Storm
Packet Storm
•added 2023/05/22 12:00 a.m.•358 views

W3 Eden Download Manager 3.2.70 Cross Site Scripting

W3 Eden recently patched an Authenticated Stored Cross-Site Scripting vulnerability in Download Manager. On April 25, 2023, our Wordfence Threat Intelligence team identified and began the responsible disclosure process for a stored Cross-Site Scripting XSS vulnerability in W3 Eden’s Download...

7.1AI score0.00646EPSS
SaveExploits2
Openbugbounty
Openbugbounty
•added 2023/05/06 9:39 a.m.•10 views

gardenofeden.bg Cross Site Scripting vulnerability OBB-3299468

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
OSV
OSV
•added 2023/04/18 2:15 p.m.•18 views

CVE-2022-45836

Unauth. Reflected Cross-Site Scripting XSS vulnerability in W3 Eden, Inc. Download Manager plugin = 3.2.59 versions...

6.1CVSS5.8AI score0.0068EPSS
SaveExploits0References1
NVD
NVD
•added 2023/04/18 2:15 p.m.•31 views

CVE-2022-45836

Unauth. Reflected Cross-Site Scripting XSS vulnerability in W3 Eden, Inc. Download Manager plugin = 3.2.59 versions...

6.3CVSS6.2AI score0.0068EPSS
SaveExploits0References1
CVE
CVE
•added 2023/04/18 1:58 p.m.•101 views

CVE-2022-45836

The W3 Eden, Inc. Download Manager plugin for WordPress, versions 3.2.59 and earlier , is vulnerable to an unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability. The root cause is insufficient input sanitization , which allows an attacker to execute arbitrary scripts in a victim's br...

6.3CVSS6AI score0.0068EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/04/18 1:58 p.m.•15 views

CVE-2022-45836 WordPress Download Manager Plugin <= 3.2.59 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in W3 Eden, Inc. Download Manager plugin = 3.2.59 versions...

7.1CVSS5.9AI score0.0068EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/18 12:00 a.m.•7 views

CVE-2022-45836: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in W3 Eden, Inc. Download Manager plugin = 3.2.59 versions...

6.3CVSS5.8AI score0.0068EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/04/18 12:00 a.m.•16 views

PT-2023-14776

Name of the Vulnerable Software and Affected Versions W3 Eden, Inc. Download Manager plugin versions 3.2.59 and earlier Description The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited without authentication, allowing for reflect...

7.1CVSS6AI score0.0068EPSS
SaveExploits0References5
Openbugbounty
Openbugbounty
•added 2023/03/11 8:40 a.m.•18 views

crosby-on-eden.cumbria.sch.uk Cross Site Scripting vulnerability OBB-3217584

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
OSV
OSV
•added 2023/02/06 3:15 p.m.•16 views

CVE-2022-48019

The components wfshbr64.sys and wfshbr32.sys in Another Eden before v3.0.20 and before v2.14.200 allows attackers to perform privilege escalation via a crafted payload...

7.8CVSS5.8AI score0.0048EPSS
SaveExploits3References5
NVD
NVD
•added 2023/02/06 3:15 p.m.•26 views

CVE-2022-48019

The components wfshbr64.sys and wfshbr32.sys in Another Eden before v3.0.20 and before v2.14.200 allows attackers to perform privilege escalation via a crafted payload...

7.8CVSS7.7AI score0.00339EPSS
SaveExploits1References5
Prion
Prion
•added 2023/02/06 3:15 p.m.•28 views

Privilege escalation

The components wfshbr64.sys and wfshbr32.sys in Another Eden before v3.0.20 and before v2.14.200 allows attackers to perform privilege escalation via a crafted payload...

4.3CVSS7.6AI score0.0048EPSS
SaveExploits3References5Affected Software1
CNNVD
CNNVD
•added 2023/02/06 12:00 a.m.•19 views

Another Eden 安全漏洞

WFS Another Eden 另一个伊甸 is a 2017 free-to-play mobile RPG game by WFS Japan. A security vulnerability exists in Another Eden versions prior to v3.0.20 and prior to v2.14.200, which stems from the components wfshbr64.sys and wfshbr32.sys that allow an attacker to perform elevation of privilege via ...

7.8CVSS7.3AI score0.00339EPSS
SaveExploits1References6
Rows per page
Query Builder