Lucene search
+L

9 matches found

EUVD
EUVD
added 2026/08/10 6:0 a.m.10 views

EUVD-2026-55021

The Advanced Excerpt WordPress plugin before 4.5 does not sanitise and escape one of its settings before outputting it on the front end of the site, which could allow administrators including those without the unfilteredhtml capability, such as on multisite to perform Stored Cross-Site Scripting...

4.8CVSS5.3AI score0.00173EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/10 6:0 a.m.14 views

CVE-2026-13701

The Advanced Excerpt WordPress plugin before 4.5 does not sanitise and escape one of its settings before outputting it on the front end of the site, which could allow administrators including those without the unfilteredhtml capability, such as on multisite to perform Stored Cross-Site Scripting...

5.3AI score0.00173EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/06 12:15 p.m.26 views

CVE-2023-46776

Cross-Site Request Forgery CSRF vulnerability in Serena Villa Auto Excerpt everywhere plugin = 1.5 versions...

8.8CVSS8.8AI score0.00216EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/06 12:15 p.m.22 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Serena Villa Auto Excerpt everywhere plugin = 1.5 versions...

6.8CVSS7.2AI score0.00216EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/06 12:0 a.m.12 views

PT-2023-30205 · WordPress · Serena Villa Auto Excerpt Everywhere Plugin

Name of the Vulnerable Software and Affected Versions: Serena Villa Auto Excerpt everywhere plugin versions = 1.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions ...

8.8CVSS9.3AI score0.00216EPSS
SaveExploits0References4
NVD
NVD
added 2023/10/25 6:17 p.m.41 views

CVE-2023-45764

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Gopi Ramasamy Scroll post excerpt plugin = 8.0 versions...

5.9CVSS5.4AI score0.00418EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/25 6:17 p.m.9 views

CVE-2023-45764

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Gopi Ramasamy Scroll post excerpt plugin = 8.0 versions...

4.8CVSS7.3AI score0.00418EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/10/24 11:58 a.m.38 views

CVE-2023-45764 WordPress Scroll post excerpt Plugin <= 8.0 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Gopi Ramasamy Scroll post excerpt plugin = 8.0 versions...

5.9CVSS5.5AI score0.00418EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/24 11:58 a.m.46 views

CVE-2023-45764

CVE-2023-45764 is a stored XSS vulnerability in the Gopi Ramasamy Scroll post excerpt plugin for WordPress, affecting versions 8.0. No exploitation details are provided in the documents. Monitor for a vendor patch and apply the upgrade when available.

5.9CVSS5.1AI score0.00418EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder