Lucene search
+L

2299 matches found

Spring Security Advisories
Spring Security Advisories
•added 2023/11/28 12:00 a.m.•70 views

This Week in Spring - 28 November, 2023

Hi, Spring fans! I hope everyone who celebrated Thanksgiving had a wonderful time. Did you indulge in too much turkey? Anyway, let's jump into this week's edition of This Week in Spring—a particularly special one for a couple of reasons. First, it's our first issue after the launch of Spring Boot...

5CVSS5.1AI score0.01219EPSS
SaveExploits0
Cvelist
Cvelist
•added 2023/11/14 9:01 p.m.•35 views

CVE-2023-47544 WordPress Atarim Plugin <= 3.12 is vulnerable to Cross Site Scripting (XSS)

Unauth. Stored Cross-Site Scripting XSS vulnerability in Atarim Visual Website Collaboration, Feedback & Project Management – Atarim plugin = 3.12 versions...

7.1CVSS6.1AI score0.00412EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/14 9:01 p.m.•57 views

CVE-2023-47544

CVE-2023-47544: Unauthenticated Stored XSS in Atarim Visual Website Collaboration plugin ≤ 3.12. An attacker could inject scripts that run in other users’ contexts. Patch is available in version 3.13; upgrade to remediation. Public references confirm the vulnerability and version cap.

7.1CVSS5.9AI score0.00412EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/14 12:00 a.m.•3 views

CVE-2023-47544: Improper Neutralization of Input During Web Page Generation

Unauth. Stored Cross-Site Scripting XSS vulnerability in Atarim Visual Website Collaboration, Feedback & Project Management – Atarim plugin = 3.12 versions...

7.1CVSS6.4AI score0.00412EPSS
SaveExploits0References2
Malwarebytes
Malwarebytes
•added 2023/10/30 10:51 p.m.•39 views

OneView updates: Dive into Report 2.0 &amp; the new Global Site Filter

Were rolling out two new features to enhance usability in OneView, our multi-tenant platform for Managed Service Providers: Report 2.0 and the Global Site Filter. Heres what you need to know: Report 2.0: Improved Reporting in OneView Report 2.0 offers a more streamlined approach to reporting with...

7AI score
SaveExploits0
Trend Micro Simply Security
Trend Micro Simply Security
•added 2023/10/30 12:00 a.m.•10 views

Trend Micro Recognized as a Customer Favorite

Customer feedback validates Trend's leadership in in XDR, endpoint security, hybrid Cloud...

7.3AI score
SaveExploits0
OSV
OSV
•added 2023/10/27 8:15 a.m.•16 views

CVE-2023-46153

Unauth. Stored Cross-Site Scripting XSS vulnerability in UserFeedback Team User Feedback plugin = 1.0.9 versions...

6.1CVSS7.3AI score0.00354EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/27 7:39 a.m.•73 views

CVE-2023-46153

CVE-2023-46153 is an unauthenticated stored XSS in the WordPress plugin “UserFeedback Team User Feedback” (versions

7.1CVSS5.8AI score0.00354EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/27 7:39 a.m.•22 views

CVE-2023-46153 WordPress User Feedback Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)

Unauth. Stored Cross-Site Scripting XSS vulnerability in UserFeedback Team User Feedback plugin = 1.0.9 versions...

7.1CVSS5.8AI score0.00354EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/10/27 7:39 a.m.•42 views

CVE-2023-46153 WordPress User Feedback Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)

Unauth. Stored Cross-Site Scripting XSS vulnerability in UserFeedback Team User Feedback plugin = 1.0.9 versions...

7.1CVSS6.1AI score0.00354EPSS
SaveExploits0References1
WPVulnDB
WPVulnDB
•added 2023/10/27 12:00 a.m.•23 views

User Feedback < 1.0.10 - Unauthenticated Stored XSS

Description The plugin does not validate and escape some parameters, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks...

7.1CVSS5.8AI score0.00354EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2023/10/27 12:00 a.m.•14 views

PT-2023-29881 · Unknown · Userfeedback Team User Feedback

Name of the Vulnerable Software and Affected Versions: UserFeedback Team User Feedback plugin versions 1.0.9 and earlier Description: The issue is related to an Unauth. Stored Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the website, which...

7.1CVSS6AI score0.00354EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/27 12:00 a.m.•2 views

CVE-2023-46153: Improper Neutralization of Input During Web Page Generation

Unauth. Stored Cross-Site Scripting XSS vulnerability in UserFeedback Team User Feedback plugin = 1.0.9 versions...

7.1CVSS6.4AI score0.00354EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/10/27 12:00 a.m.•16 views

WordPress plugin User Feedback Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS6AI score0.00354EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2023/10/17 12:00 a.m.•24 views

WordPress User Feedback Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)

Software User Feedback Type Plugin Vulnerable versions = 1.0.9 Fixed in 1.0.10 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-46153 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID a28b0bbea276 Credits Dimas Maulana Required privilege...

7.1CVSS6.5AI score0.00354EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2023/10/11 10:51 a.m.•28 views

MAL-2023-8330 Malicious code in abc-user-feedback (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ff790dbcec56cb74a132d712fc0219e9b1671efca1e5a70c8619088b6b8ab64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7.2AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/10/11 10:51 a.m.•10 views

Malicious code in abc-user-feedback (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ff790dbcec56cb74a132d712fc0219e9b1671efca1e5a70c8619088b6b8ab64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2023/10/04 12:00 a.m.•22 views

WordPress User Feedback Plugin < 1.0.8 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:userfeedback:userfeedback"; ifdescription...

7.1CVSS7AI score0.00558EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/09/29 1:59 p.m.•45 views

CVE-2023-39308 WordPress User Feedback Plugin <= 1.0.7 is vulnerable to Cross Site Scripting (XSS)

Unauth. Stored Cross-Site Scripting XSS vulnerability in UserFeedback Team User Feedback plugin = 1.0.7 versions...

7.1CVSS6.2AI score0.00558EPSS
SaveExploits1References2
CVE
CVE
•added 2023/09/29 1:59 p.m.•60 views

CVE-2023-39308

CVE-2023-39308 affects the WordPress UserFeedback Lite (UserFeedback Team) plugin,

7.1CVSS5.8AI score0.00558EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder