Lucene search
K

7 matches found

CVE
CVE
added 2026/03/19 4:27 a.m.2 views

CVE-2026-1238

SlimStat Analytics for WordPress is affected by a Stored Cross-Site Scripting vulnerability via the 'fh' parameter in all versions up to 5.3.5. The issue arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject scripts that execute when users v...

7.2CVSS6AI score0.0013EPSS
Exploits0References4
NVD
NVD
added 2026/02/20 9:19 p.m.4 views

CVE-2026-25896

fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. From 4.1.3to before 5.3.5, a dot . in a DOCTYPE entity name is treated as a regex wildcard during entity replacement, allowing an attacker to shadow...

9.3CVSS0.0002EPSS
Exploits1References4
Patchstack
Patchstack
added 2026/01/08 1:13 p.m.2 views

WordPress HTML5 Video Player with Playlist & Multiple Skins plugin <= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin HTML5 Video Player with Playlist & Multiple Skins versions = 5.3.5...

6.1CVSS6.1AI score0.00019EPSS
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/21 12:0 a.m.6 views

PT-2025-47807

Name of the Vulnerable Software and Affected Versions ESF-IDF versions 5.3.4 through 5.5.1 Description ESF-IDF, the Espressif Internet of Things IOT Development Framework, contains a flaw in its hardware JPEG decoder when used with the ESP32-P4. The software parser does not perform adequate...

6.9CVSS6.6AI score0.00086EPSS
Exploits0References8
RedhatCVE
RedhatCVE
added 2025/02/05 4:15 a.m.3 views

CVE-2024-54392

Cross-Site Request Forgery CSRF vulnerability in midoks WP微信机器人 wp-weixin-robot allows Stored XSS.This issue affects WP微信机器人: from n/a through = 5.3.5...

7.1CVSS7.2AI score0.00144EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/04/29 12:0 a.m.2 views

PT-2024-25321 · 8Theme · 8Theme Xstore Core

Name of the Vulnerable Software and Affected Versions: 8theme XStore Core versions n/a through 5.3.5 Description: The issue is related to the deserialization of untrusted data in 8theme XStore Core. This can potentially lead to security risks. No information is provided about the estimated number...

9.8CVSS6.7AI score0.00692EPSS
Exploits0References9
CNVD
CNVD
added 2020/09/16 12:0 a.m.2 views

IBM Elastic Storage Server Spectrum Scale Denial of Service Vulnerability (CNVD-2020-52392)

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

6.5CVSS6.5AI score0.00377EPSS
Exploits0References1
Rows per page
Query Builder