Lucene search
+L

4 matches found

NVD
NVD
added 2024/10/29 12:15 p.m.30 views

CVE-2024-49663

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in elenkadark uCAT – Next Story ucat-next-story allows Reflected XSS.This issue affects uCAT – Next Story: from n/a through = 2.0.0...

7.1CVSS0.00281EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/10/29 11:41 a.m.19 views

CVE-2024-49663 WordPress uCAT – Next Story plugin <= 2.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in elenkadark uCAT – Next Story ucat-next-story allows Reflected XSS.This issue affects uCAT – Next Story: from n/a through = 2.0.0...

7.1CVSS0.00281EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/29 11:41 a.m.10 views

CVE-2024-49663 WordPress uCAT – Next Story plugin <= 2.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in elenkadark uCAT – Next Story ucat-next-story allows Reflected XSS.This issue affects uCAT – Next Story: from n/a through = 2.0.0...

7.1CVSS5.9AI score0.00281EPSS
Exploits0References1
CVE
CVE
added 2024/10/29 11:41 a.m.54 views

CVE-2024-49663

CVE-2024-49663 affects the WordPress plugin uCAT – Next Story (versions ≤ 2.0.0). The description documents an improper neutralization of input during web page generation leading to a reflected XSS vulnerability. Exploitation is possible without authentication (per PatchStack entry), via crafting...

7.1CVSS5.9AI score0.00281EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder