Lucene search
+L

571 matches found

Vulnrichment
Vulnrichment
added 2024/05/01 12:00 a.m.12 views

CVE-2024-33306

SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting XSS via "First Name" parameter in Create User...

6AI score0.00657EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/05/01 12:00 a.m.42 views

CVE-2024-33306

SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting XSS via "First Name" parameter in Create User...

5.9AI score0.00657EPSS
SaveExploits1References1
CVE
CVE
added 2024/04/24 5:00 a.m.89 views

CVE-2024-1756

CVE-2024-1756 affects the WooCommerce Customers Manager WordPress plugin, prior to version 29.8, due to missing authorization and CSRF protections in an AJAX action. This allows any authenticated user (e.g., a subscriber) to call the action and exfiltrate customer data including email addresses, ...

6.5CVSS9.2AI score0.00319EPSS
SaveExploits2References1Affected Software1
OSV
OSV
added 2024/04/15 10:15 p.m.9 views

CVE-2024-31651

A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the First Name parameter...

6.1CVSS5.9AI score0.00435EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/04/15 12:00 a.m.9 views

Cosmetics and Beauty Product Online Store 安全漏洞

Cosmetics And Beauty Product Online Store is an online store for cosmetics and beauty products from the individual developer Carlo Montero. A security vulnerability exists in Cosmetics and Beauty Product Online Store v1.0, which originates from a cross-site scripting vulnerability in the First Na...

6.1CVSS6.1AI score0.00435EPSS
SaveExploits1References2
CVE
CVE
added 2024/04/15 12:00 a.m.68 views

CVE-2024-31651

CVE-2024-31651 describes a cross-site scripting (XSS) vulnerability in the Cosmetics and Beauty Product Online Store v1.0. The issue arises from unsanitized input in the irst Name parameter, enabling an attacker to inject and execute arbitrary web scripts or HTML in the victim00. Documents con...

6.1CVSS6AI score0.00435EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2024/04/15 12:00 a.m.35 views

CVE-2024-31651

A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the First Name parameter...

6AI score0.00435EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/04/15 12:00 a.m.9 views

PT-2024-24177 · Unknown · Cosmetics/Beauty Product Online Store

Name of the Vulnerable Software and Affected Versions: Cosmetics and Beauty Product Online Store version 1.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the First Name parameter. This enables attackers...

6.1CVSS5.9AI score0.00435EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2024/04/15 12:00 a.m.15 views

CVE-2024-31651

A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the First Name parameter...

6.2AI score0.00435EPSS
SaveExploits1References1
OSV
OSV
added 2024/04/11 8:15 p.m.9 views

CVE-2024-22717

Cross Site Scripting XSS vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the First Name field in the application...

6.1CVSS6AI score0.0037EPSS
SaveExploits1References1
NVD
NVD
added 2024/04/11 8:15 p.m.17 views

CVE-2024-22717

Cross Site Scripting XSS vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the First Name field in the application...

6.1CVSS5.9AI score0.0037EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/04/11 12:00 a.m.7 views

Form Tools 安全漏洞

Form Tools is an open source codebase for Form Tools scripts, modules, themes and APIs. A security vulnerability exists in Form Tools version 3.1.1, which stems from a cross-site scripting XSS vulnerability in the First Name field...

6.1CVSS5.7AI score0.0037EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/04/11 12:00 a.m.11 views

PT-2024-19536 · Unknown · Form Tools

Name of the Vulnerable Software and Affected Versions: Form Tools version 3.1.1 Description: A Cross Site Scripting XSS issue allows attackers to run arbitrary code via the First Name field in the application. This enables attackers to execute malicious scripts on the client-side, potentially...

6.1CVSS7.2AI score0.0037EPSS
SaveExploits1References4
OSV
OSV
added 2024/03/28 7:15 p.m.12 views

CVE-2024-31064

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field...

6.1CVSS6.1AI score0.00661EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2024/03/28 7:15 p.m.6 views

CVE-2024-31064

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field...

6.1CVSS6.3AI score0.00661EPSS
SaveExploits1References5
NVD
NVD
added 2024/03/28 7:15 p.m.16 views

CVE-2024-31064

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field...

6.1CVSS7AI score0.00661EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/03/28 12:00 a.m.16 views

PT-2024-23744

Name of the Vulnerable Software and Affected Versions Insurance Mangement System versions 1.0.0 and earlier Description The issue allows a remote attacker to execute arbitrary code via the First Name input field. This is a Cross Site Scripting vulnerability. Recommendations For versions 1.0.0 and...

6.1CVSS6.4AI score0.00661EPSS
SaveExploits1References10
CVE
CVE
added 2024/03/28 12:00 a.m.83 views

CVE-2024-31064

CVE-2024-31064 affects Insurance Mangement System (version 1.0.0 and earlier). The vulnerability is a Cross Site Scripting (XSS) flaw in the First Name input field that enables a remote attacker to execute arbitrary code. The root cause is unsanitized input in the First Name field leading to scri...

6.1CVSS7.3AI score0.00661EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2024/03/28 12:00 a.m.10 views

Insurance Management System 安全漏洞

Insurance Management System is an insurance management system from the individual developer Angel Jude Reyes Suarez. A security vulnerability exists in Insurance Management System v.1.0.0 and prior versions, which stems from a cross-site scripting XSS vulnerability in the First Name field...

6.1CVSS5.7AI score0.00661EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2024/03/28 12:00 a.m.37 views

CVE-2024-31064

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field...

7.2AI score0.00661EPSS
SaveExploits1References2
Rows per page
Query Builder