Lucene search
+L

9 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•26 views

EUVD-2024-44043

Malicious code in bioql PyPI...

4.4CVSS6.5AI score0.00246EPSS
SaveExploits0References2
NVD
NVD
•added 2024/05/29 6:18 a.m.•33 views

CVE-2024-4419

The Fetch JFT plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.8.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and...

4.4CVSS4.7AI score0.00246EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/05/29 6:18 a.m.•20 views

CVE-2024-4419

The Fetch JFT plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.8.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and...

4CVSS5.9AI score0.00246EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/05/29 3:23 a.m.•22 views

WordPress Fetch JFT plugin <= 1.8.3 - Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting vulnerability discovered by Benedictus Jovan aillesiM in WordPress Plugin Fetch JFT versions = 1.8.3...

4.4CVSS5.7AI score0.00246EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/05/29 12:00 a.m.•22 views

WordPress Fetch JFT Plugin <= 1.8.3 is vulnerable to Cross Site Scripting (XSS)

Software Fetch JFT Type Plugin Vulnerable versions = 1.8.3 Fixed in 1.8.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4419 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 70f08e1c695e Credits Benedictus Jovan aillesiM...

4.4CVSS5.8AI score0.00246EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/29 12:00 a.m.•12 views

CVE-2024-4419: Improper Neutralization of Input During Web Page Generation

The Fetch JFT plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.8.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and...

4.4CVSS5.9AI score0.00246EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/29 12:00 a.m.•23 views

WordPress plugin Fetch JFT 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

4.4CVSS5.6AI score0.00246EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/05/29 12:00 a.m.•20 views

PT-2024-31023 · WordPress · Fetch Jft

Name of the Vulnerable Software and Affected Versions: Fetch JFT plugin for WordPress versions up to, and including, 1.8.3 Description: The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient input sanitization and output escaping. This allows authenticated...

4.4CVSS5.7AI score0.00246EPSS
SaveExploits0References5
WPVulnDB
WPVulnDB
•added 2024/05/28 12:00 a.m.•20 views

Fetch JFT < 1.8.4 - Authenticated (Administrator+) Stored Cross-Site Scripting

Description The Fetch JFT plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.8.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

4.4CVSS5.5AI score0.00246EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder