Lucene search
+L

11758 matches found

NVD
NVD
added 2025/05/07 3:16 p.m.14 views

CVE-2025-47473

Cross-Site Request Forgery CSRF vulnerability in pimwick PW WooCommerce Bulk Edit pw-bulk-edit allows Cross Site Request Forgery.This issue affects PW WooCommerce Bulk Edit: from n/a through = 2.134...

5.4CVSS0.00154EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/07 2:19 p.m.13 views

CVE-2025-47473 WordPress PW WooCommerce Bulk Edit <= 2.134 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in pimwick PW WooCommerce Bulk Edit allows Cross Site Request Forgery. This issue affects PW WooCommerce Bulk Edit: from n/a through 2.134...

5.4CVSS5.5AI score0.00154EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/07 2:19 p.m.57 views

CVE-2025-47473

CVE-2025-47473 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin PW WooCommerce Bulk Edit (PW WooCommerce Bulk Edit). Affected versions are up to 2.134 (from n/a through 2.134). The CVSS base score is 5.4 (Medium), with attack vector Network, attack complexity Lo...

5.4CVSS7.2AI score0.00154EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/07 2:19 p.m.34 views

CVE-2025-47473 WordPress PW WooCommerce Bulk Edit plugin <= 2.134 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in pimwick PW WooCommerce Bulk Edit pw-bulk-edit allows Cross Site Request Forgery.This issue affects PW WooCommerce Bulk Edit: from n/a through = 2.134...

5.4CVSS0.00154EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/05/07 12:29 p.m.12 views

WordPress PW WooCommerce Bulk Edit plugin <= 2.134 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by domiee13 in WordPress Plugin PW WooCommerce Bulk Edit versions = 2.134...

5.4CVSS8AI score0.00154EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/05/07 12:00 a.m.10 views

WordPress plugin PW WooCommerce Bulk Edit 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

5.4CVSS6.2AI score0.00154EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/05/07 12:00 a.m.7 views

Online Nurse Hiring System edit-nurse.php File SQL Injection Vulnerability

Online Nurse Hiring System is an online nurse hiring system. Online Nurse Hiring System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the file /admin/edit-nurse.php. An attacker can exploit this vulnerability to execut...

8.8CVSS8.2AI score0.00487EPSS
SaveExploits1References1
NVD
NVD
added 2025/05/06 5:15 a.m.29 views

CVE-2025-4323

A vulnerability, which was classified as problematic, has been found in MRCMS 3.1.2. Affected by this issue is some unknown functionality of the component Edit Article Page. The manipulation of the argument Title leads to cross site scripting. The attack may be launched remotely. The exploit has...

5.4CVSS0.00312EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/05/06 5:00 a.m.12 views

CVE-2025-4323 MRCMS Edit Article Page cross site scripting

A vulnerability, which was classified as problematic, has been found in MRCMS 3.1.2. Affected by this issue is some unknown functionality of the component Edit Article Page. The manipulation of the argument Title leads to cross site scripting. The attack may be launched remotely. The exploit has...

4.8CVSS6.2AI score0.00312EPSS
SaveExploits1References4
OSV
OSV
added 2025/05/06 5:00 a.m.11 views

CVE-2025-4323 MRCMS Edit Article Page cross site scripting

A vulnerability, which was classified as problematic, has been found in MRCMS 3.1.2. Affected by this issue is some unknown functionality of the component Edit Article Page. The manipulation of the argument Title leads to cross site scripting. The attack may be launched remotely. The exploit has...

4.8CVSS3.8AI score
SaveExploits0References6
CVE
CVE
added 2025/05/06 5:00 a.m.86 views

CVE-2025-4323

MRCMS 3.1.2 is affected in the Edit Article Page component. The vulnerability arises from improper handling of the Title argument, enabling cross-site scripting (XSS). The issue potentially allows remote exploitation, and public disclosure of the exploit is noted. Practical impact is XSS in the a...

5.4CVSS6.2AI score0.00312EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2025/05/06 5:00 a.m.39 views

CVE-2025-4323 MRCMS Edit Article Page cross site scripting

A vulnerability, which was classified as problematic, has been found in MRCMS 3.1.2. Affected by this issue is some unknown functionality of the component Edit Article Page. The manipulation of the argument Title leads to cross site scripting. The attack may be launched remotely. The exploit has...

4.8CVSS0.00312EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/05/06 2:00 a.m.17 views

CVE-2025-4306 PHPGurukul Nipah Virus Testing Management System edit-phlebotomist.php sql injection

A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /edit-phlebotomist.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be initiated remotely...

7.5CVSS7.4AI score0.00584EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/05/06 12:00 a.m.19 views

MRCMS 代码注入漏洞

MRCMS is a content management system by marker personal developer. A code injection vulnerability exists in MRCMS version 3.1.2, which stems from improper manipulation of the parameter Title in the component Edit Article Page, which could lead to a cross-site scripting attack...

5.4CVSS4.1AI score0.00312EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/05/06 12:00 a.m.13 views

MRCMS 代码注入漏洞

MRCMS is a content management system by the individual developer of marker. A code injection vulnerability exists in MRCMS version 3.1.2, which stems from improper manipulation of the file /admin/link/edit.do in the component External Link Management Page, which could lead to a cross-site scripti...

5.4CVSS4.2AI score0.00312EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/05/06 12:00 a.m.32 views

PT-2025-19836 · Mrcms · Mrcms

Name of the Vulnerable Software and Affected Versions: MRCMS version 3.1.2 Description: A problematic issue has been found in the Edit Article Page component. The manipulation of the Title argument leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed ...

5.4CVSS3.2AI score0.00312EPSS
SaveExploits1References10
Vulnrichment
Vulnrichment
added 2025/05/05 10:31 p.m.11 views

CVE-2025-4293 MRCMS Group Edit Page edit.do cross site scripting

A vulnerability was found in MRCMS 3.1.3 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/group/edit.do of the component Group Edit Page. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been...

4.8CVSS6.2AI score0.00312EPSS
SaveExploits1References4
CVE
CVE
added 2025/05/05 10:31 p.m.92 views

CVE-2025-4293

CVE-2025-4293 affects MRCMS 3.1.3, specifically the Group Edit Page component’s /admin/group/edit.do. The root cause is a cross-site scripting vulnerability in an unknown functionality of that endpoint, which can be exploited remotely. Public disclosure and available details indicate exploitation...

5.4CVSS3.5AI score0.00312EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2025/05/05 10:31 p.m.13 views

CVE-2025-4293 MRCMS Group Edit Page edit.do cross site scripting

A vulnerability was found in MRCMS 3.1.3 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/group/edit.do of the component Group Edit Page. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been...

4.8CVSS3.7AI score
SaveExploits0References6
Cvelist
Cvelist
added 2025/05/05 10:31 p.m.44 views

CVE-2025-4293 MRCMS Group Edit Page edit.do cross site scripting

A vulnerability was found in MRCMS 3.1.3 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/group/edit.do of the component Group Edit Page. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been...

4.8CVSS0.00312EPSS
SaveExploits1References4
Rows per page
Query Builder