Lucene search
K

129 matches found

NVD
NVD
added 2025/03/03 2:15 p.m.3 views

CVE-2025-23563

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mbyte Explore pages explore-pages allows Reflected XSS.This issue affects Explore pages: from n/a through = 1.01...

7.1CVSS0.00232EPSS
Exploits0References1
CVE
CVE
added 2025/03/03 1:30 p.m.35 views

CVE-2025-23563

CVE-2025-23563 is a reflected XSS in the WordPress Explore pages plugin (versions

7.1CVSS5.9AI score0.00232EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/03 1:30 p.m.4 views

CVE-2025-23563 WordPress Explore pages plugin <= 1.01 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Explore pages allows Reflected XSS. This issue affects Explore pages: from n/a through 1.01...

7.1CVSS7.1AI score0.00232EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/03 1:30 p.m.11 views

CVE-2025-23563 WordPress Explore pages plugin <= 1.01 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mbyte Explore pages explore-pages allows Reflected XSS.This issue affects Explore pages: from n/a through = 1.01...

7.1CVSS0.00232EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/03/03 12:0 a.m.1 views

WordPress plugin Explore pages 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS5.9AI score0.00232EPSS
Exploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/02/23 4:50 a.m.4 views

Malicious code in explore-assistant (npm)

This package runs commands on import that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9e10cb387b2960187d5b207b5b8dd3c8e8583e0c91741a0c4506c05af801ed2 Any computer that has this package installed or running...

7AI score
Exploits0References3
OSV
OSV
added 2025/02/23 4:50 a.m.2 views

MAL-2025-1551 Malicious code in explore-assistant (npm)

This package runs commands on import that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9e10cb387b2960187d5b207b5b8dd3c8e8583e0c91741a0c4506c05af801ed2 Any computer that has this package installed or running...

7.1AI score
Exploits0References3
OSV
OSV
added 2025/02/05 7:29 a.m.6 views

BIT-SUPERSET-2021-32609 XSS vulnerability on Explore page

Apache Superset up to and including 1.1 does not sanitize titles correctly on the Explore page. This allows an attacker with Explore access to save a chart with a malicious title, injecting html including scripts into the page...

5.4CVSS5.2AI score0.01309EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/01/16 6:41 p.m.2 views

WordPress Explore pages plugin <= 1.01 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika in WordPress Plugin Explore pages versions = 1.01...

7.1CVSS6.1AI score0.00232EPSS
Exploits0Affected Software1
Spring Engineering
Spring Engineering
added 2023/09/28 12:0 a.m.10 views

A Bootiful Podcast: Spring AI lead Dr. Mark Pollack

Hi, Spring fans! In this episode I talk to Dr. Mark Pollack, lead of the new Spring AI project. This episode was recorded live at SpringOne at VMware Explore 2023, in Las Vegas...

6.8AI score
Exploits0
Openbugbounty
Openbugbounty
added 2023/05/09 10:50 p.m.11 views

exploresummerside.com Cross Site Scripting vulnerability OBB-3314484

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
Exploits0
Spring Engineering
Spring Engineering
added 2023/03/16 12:0 a.m.15 views

A Bootiful Podcast: Spring Batch lead Mahmoud Ben Hassine on the latest and greatest in 2023

Hi, Spring fans! Welcome to another installment of A Bootiful Podcast! In this installment, Josh Long @starbuxman talks to Spring Batch lead Mahmoud Ben Hassine @FMBENHASSINE about the latest and greatest in Spring Batch. notes Submit your talk to SpringOne@Explore, being held August 21-24, 2023,...

0.6AI score
Exploits0
The Hacker News
The Hacker News
added 2022/11/15 1:49 p.m.32 views

Researchers Reported Critical SQLi and Access Flaws in Zendesk Analytics Service

Cybersecurity researchers have disclosed details of now-patched flaws in Zendesk Explore that could have been exploited by an attacker to gain unauthorized access to information from customer accounts that have the feature turned on. "Before it was patched, the flaw would have allowed threat acto...

1.1AI score
Exploits0
OSV
OSV
added 2022/05/24 7:17 p.m.19 views

GHSA-F8VC-F28W-X9C9 Apache Superset Cross-site Scripting (XSS) vulnerability on the Explore page

Apache Superset up to and including 1.1 does not sanitize titles correctly on the Explore page. This allows an attacker with Explore access to save a chart with a malicious title, injecting html including scripts into the page...

5.4CVSS5.2AI score0.01309EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2022/05/24 7:17 p.m.21 views

Apache Superset Cross-site Scripting (XSS) vulnerability on the Explore page

Apache Superset up to and including 1.1 does not sanitize titles correctly on the Explore page. This allows an attacker with Explore access to save a chart with a malicious title, injecting html including scripts into the page...

5.4CVSS5.5AI score0.01309EPSS
Exploits0References4Affected Software1
0day.today
0day.today
added 2022/05/12 12:0 a.m.315 views

Explore CMS 1.0 - SQL Injection Vulnerability

Exploit Title: Explore CMS 1.0 - SQL Injection Exploit Author: Sajibe Kanti Vendor Name : EXPLORE IT Vendor Homepage: https://exploreit.com.bd CVE: CVE-2022-27412 POC SQL Injection SQL injection is a web security vulnerability that allows an attacker to interfere with the queries that an...

9.8CVSS0.1AI score0.01134EPSS
Exploits3
Exploit DB
Exploit DB
added 2022/05/11 12:0 a.m.282 views

Explore CMS 1.0 - SQL Injection

Exploit Title: Explore CMS 1.0 - SQL Injection Date: 19/03/2022 Exploit Author: Sajibe Kanti Vendor Name : EXPLORE IT Vendor Homepage: https://exploreit.com.bd CVE: CVE-2022-27412 POC SQL Injection SQL injection is a web security vulnerability that allows an attacker to interfere with the queries...

9.8CVSS9.7AI score0.01134EPSS
Exploits3
OSV
OSV
added 2022/05/09 6:15 p.m.3 views

CVE-2022-27412

Explore CMS v1.0 was discovered to contain a SQL injection vulnerability via a /page.php?id= request...

9.8CVSS5.8AI score0.01134EPSS
Exploits3References2
ATTACKERKB
ATTACKERKB
added 2022/05/09 6:15 p.m.3 views

CVE-2022-27412

Explore CMS v1.0 was discovered to contain a SQL injection vulnerability via a /page.php?id= request...

9.8CVSS6AI score0.01134EPSS
Exploits3References3
Cvelist
Cvelist
added 2022/05/09 5:31 p.m.11 views

CVE-2022-27412

Explore CMS v1.0 was discovered to contain a SQL injection vulnerability via a /page.php?id= request...

10AI score0.01134EPSS
Exploits3References2
Rows per page
Query Builder