Lucene search
K

1605 matches found

CNNVD
CNNVD
added 2025/01/16 12:0 a.m.2 views

WordPress plugin Top Flash Embed 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.5CVSS7.4AI score0.00357EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/16 12:0 a.m.2 views

WordPress plugin Spiderpowa Embed PDF 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

6.5CVSS7.7AI score0.00357EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/01/16 12:0 a.m.2 views

PT-2025-5107 · Unknown · Spiderpowa Embed Pdf

Name of the Vulnerable Software and Affected Versions: Spiderpowa Embed PDF versions 1.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an attacker can inject malicious...

6.5CVSS9.1AI score0.00357EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/01/16 12:0 a.m.1 views

WordPress plugin Bible Embed 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery vulnerabili...

7.1CVSS8.3AI score0.00195EPSS
Exploits0References1
NVD
NVD
added 2025/01/09 8:15 p.m.14 views

CVE-2024-13286

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal SVG Embed allows Cross-Site Scripting XSS.This issue affects SVG Embed: from 0.0.0 before 2.1.2...

5.4CVSS0.0021EPSS
Exploits0References1
OSV
OSV
added 2025/01/09 8:15 p.m.2 views

CVE-2024-13286

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal SVG Embed allows Cross-Site Scripting XSS.This issue affects SVG Embed: from 0.0.0 before 2.1.2...

5.4CVSS5.8AI score0.0021EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/09 8:13 p.m.10 views

CVE-2024-13286 SVG Embed - Moderately critical - Cross site scripting - SA-CONTRIB-2024-050

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal SVG Embed allows Cross-Site Scripting XSS.This issue affects SVG Embed: from 0.0.0 before 2.1.2...

0.0021EPSS
Exploits0References1
CVE
CVE
added 2025/01/09 8:13 p.m.43 views

CVE-2024-13286

Summary: CVE-2024-13286 affects Drupal SVG Embed and is caused by improper input neutralization during web page generation, enabling cross-site scripting (XSS). Affected software: Drupal SVG Embed modules versions from 0.0.0 up to before 2.1.2. Root cause: Inadequate sanitization of SVG content e...

5.4CVSS6.6AI score0.0021EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/09 8:13 p.m.6 views

CVE-2024-13286 SVG Embed - Moderately critical - Cross site scripting - SA-CONTRIB-2024-050

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal SVG Embed allows Cross-Site Scripting XSS.This issue affects SVG Embed: from 0.0.0 before 2.1.2...

6.6AI score0.0021EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.2 views

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal SVG Embed prior to version 2.1.2, which stems from improper input neutralization during page generation, resulting in a cross-site scripting...

5.4CVSS6.1AI score0.0021EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.3 views

WordPress plugin Searchie 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS7.6AI score0.00318EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/01/08 12:0 a.m.2 views

WordPress plugin Slotti Ajanvaraus 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site...

6.4CVSS7.6AI score0.00265EPSS
Exploits0References3
NVD
NVD
added 2025/01/07 4:15 p.m.8 views

CVE-2025-22554

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fdfranklin06 Video Embed Optimizer video-embed-optimizer allows Stored XSS.This issue affects Video Embed Optimizer: from n/a through = 1.0.0...

6.5CVSS0.00334EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/07 2:57 p.m.6 views

CVE-2025-22545 WordPress iframe to embed plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sw-galati.ro iframe to embed allows Stored XSS.This issue affects iframe to embed: from n/a through 1.2...

6.5CVSS6.4AI score0.00334EPSS
Exploits0References1
CVE
CVE
added 2025/01/07 2:57 p.m.40 views

CVE-2025-22545

CVE-2025-22545: The iframe-to-embed vulnerability (sw-galati.ro iframe) allows Stored XSS when embedding the iframe. Affected: iframe-to-embed. Root cause: improper input neutralization during web page generation. Impact per provided metrics is Low in confidentiality, integrity, availability with...

6.5CVSS7.2AI score0.00334EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/07 2:57 p.m.18 views

CVE-2025-22545 WordPress iframe to embed plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sw.galati iframe to embed iframe-to-embed allows Stored XSS.This issue affects iframe to embed: from n/a through = 1.2...

6.5CVSS0.00334EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/07 2:57 p.m.9 views

CVE-2025-22554 WordPress Video Embed Optimizer plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Eric Franklin Video Embed Optimizer allows Stored XSS.This issue affects Video Embed Optimizer: from n/a through 1.0.0...

6.5CVSS7AI score0.00334EPSS
Exploits0References1
CVE
CVE
added 2025/01/07 2:57 p.m.61 views

CVE-2025-22554

CVE-2025-22554 is a Stored XSS vulnerability in Video Embed Optimizer (WordPress plugin) affecting versions up to 1.0.0. The issue arises from improper neutralization of input during web page generation. Exploitation details are not publicly provided in the documents beyond the stored XSS charact...

6.5CVSS7.2AI score0.00334EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/07 2:57 p.m.20 views

CVE-2025-22554 WordPress Video Embed Optimizer plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fdfranklin06 Video Embed Optimizer video-embed-optimizer allows Stored XSS.This issue affects Video Embed Optimizer: from n/a through = 1.0.0...

6.5CVSS0.00334EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/01/07 12:43 p.m.3 views

WordPress iframe to embed plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin iframe to embed versions = 1.2...

6.5CVSS6.1AI score0.00334EPSS
Exploits0Affected Software1
Rows per page
Query Builder