Lucene search
+L

20096 matches found

Vulnrichment
Vulnrichment
•added 2024/10/06 10:28 a.m.•26 views

CVE-2024-47348 WordPress Visual CSS Style Editor plugin <= 7.6.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WaspThemes YellowPencil Visual CSS Style Editor allows Reflected XSS.This issue affects YellowPencil Visual CSS Style Editor: from n/a through 7.6.4...

7.1CVSS7AI score0.0032EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/06 12:00 a.m.•9 views

CVE-2024-47348: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YellowPencil YellowPencil Visual CSS Style Editor yellow-pencil-visual-theme-customizer allows Reflected XSS.This issue affects YellowPencil Visual CSS Style Editor: from n/a through = 7.6.4...

7.1CVSS5.8AI score0.0032EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2024/10/05 12:05 p.m.•477 views

Exploit for Code Injection in Getgrav Grav

EN GenGravSSTIExploit is a PoC Python script that exploits...

8.8CVSS9AI score0.05807EPSS
SaveExploits4
NVD
NVD
•added 2024/10/04 1:15 p.m.•46 views

CVE-2024-8499

The Checkout Field Editor Checkout Manager for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘renderreviewrequestnotice’ function in all versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possib...

6.1CVSS0.00452EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2024/10/04 1:15 p.m.•20 views

CVE-2024-8499

The Checkout Field Editor Checkout Manager for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘renderreviewrequestnotice’ function in all versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possib...

6.1CVSS5.9AI score0.00452EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/10/04 12:46 p.m.•53 views

CVE-2024-8499 Checkout Field Editor (Checkout Manager) for WooCommerce <= 2.0.3 - Reflected Cross-Site Scripting via render_review_request_notice

The Checkout Field Editor Checkout Manager for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘renderreviewrequestnotice’ function in all versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possib...

4.7CVSS0.00452EPSS
SaveExploits0References3
CVE
CVE
•added 2024/10/04 12:46 p.m.•72 views

CVE-2024-8499

CVE-2024-8499 affects the WordPress plugin “Checkout Field Editor (Checkout Manager) for WooCommerce.” It is vulnerable to a Reflected Cross-Site Scripting (XSS) via the function render_review_request_notice in versions ≤ 2.0.3 due to insufficient input sanitization and output escaping. Exploitat...

6.1CVSS5.5AI score0.00452EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/10/04 12:46 p.m.•18 views

CVE-2024-8499 Checkout Field Editor (Checkout Manager) for WooCommerce <= 2.0.3 - Reflected Cross-Site Scripting via render_review_request_notice

The Checkout Field Editor Checkout Manager for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘renderreviewrequestnotice’ function in all versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possib...

4.7CVSS6.4AI score0.00452EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2024/10/04 1:25 a.m.•16 views

WordPress Checkout Field Editor (Checkout Manager) for WooCommerce plugin <= 2.0.3 - Reflected Cross-Site Scripting via render_review_request_notice vulnerability

Reflected Cross-Site Scripting via renderreviewrequestnotice vulnerability discovered by vgo0 in WordPress Plugin Checkout Field Editor Checkout Manager for WooCommerce versions = 2.0.3...

6.1CVSS6.3AI score0.00452EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/10/04 12:00 a.m.•18 views

PDF-XChange Editor Heap Buffer Overflow

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing functionality lies in the issue of operations going beyond the buffer in memory when processing Doc objects. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.0027EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
•added 2024/10/04 12:00 a.m.•21 views

PDF-XChange Editor Buffer Overflow Information Disclosure

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing functionality lies in the issue of operations going beyond the buffer in memory when processing TIF files. Exploiting this vulnerability can allow an attacker to disclose protected information...

3.3CVSS6AI score0.00345EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
•added 2024/10/04 12:00 a.m.•18 views

PDF-XChange Editor Buffer Overflow Information Disclosure

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the issue of operations going beyond the buffer in memory during PDF file processing. Exploiting this vulnerability can allow attackers to disclose protected information...

3.3CVSS6AI score0.00369EPSS
SaveExploits0References5Affected Software3
CNNVD
CNNVD
•added 2024/10/04 12:00 a.m.•42 views

WordPress plugin Checkout Field Editor for WooCommerce has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.1CVSS6.2AI score0.00452EPSS
SaveExploits0References4
Packet Storm
Packet Storm
•added 2024/10/04 12:00 a.m.•266 views

Vehicle Service Management System 1.0 WYSIWYG Code Injection

============================================================================================================================================= | Title : Vehicle Service Management System 1.0 WYSIWYG code injection vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser :...

7.4AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/10/04 12:00 a.m.•19 views

PT-2024-39058

Name of the Vulnerable Software and Affected Versions: The Checkout Field Editor Checkout Manager for WooCommerce plugin for WordPress versions up to, and including, 2.0.3 Description: The issue is related to Reflected Cross-Site Scripting via the render review request notice function due to...

6.1CVSS6.7AI score0.00452EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/04 12:00 a.m.•9 views

CVE-2024-8499: Improper Neutralization of Input During Web Page Generation

The Checkout Field Editor Checkout Manager for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘renderreviewrequestnotice’ function in all versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possib...

6.1CVSS6AI score0.00452EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/10/04 12:00 a.m.•20 views

PDF-XChange Editor Buffer Overflow Information Disclosure

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing functionality is related to the occurrence of operations outside the buffer during the processing of AcroForms forms. Exploiting this vulnerability can allow attackers to disclose sensitive information...

3.3CVSS5.9AI score0.0026EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
•added 2024/10/04 12:00 a.m.•19 views

PDF-XChange Editor Buffer Overflow Information Disclosure

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing functionality is related to the occurrence of operations outside the buffer during the processing of AcroForms forms. Exploiting this vulnerability can allow attackers to disclose sensitive information...

3.3CVSS5.9AI score0.0026EPSS
SaveExploits0References5Affected Software3
vulnersOsv
vulnersOsv
•added 2024/10/02 6:31 p.m.•4 views

org.jenkins-ci.main:jenkins-test-harness (1.639), org.jenkins-ci.main:jenkins-war (1.639) +4 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.639)

org.jenkins-ci.main:jenkins-core MAVEN version 1.639 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.639 - org.jenkins-ci.main:jenkins-war 1.639 -...

4.3CVSS0.00822EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/10/02 12:00 a.m.•20 views

Foxit PDF Reader PDF File Editing Code Execution

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to access control bugs. Exploiting this vulnerability can allow an attacker to execute arbitrary code by replacing th...

8.6CVSS7.6AI score0.00164EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder