Lucene search
K

25 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2018-8225

Malware in sbrugna...

4.8CVSS5.1AI score0.0064EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/07/03 12:0 a.m.3 views

Flatboard Pro 跨站脚本漏洞

Flatboard Pro is an open source forum system by Flatboard. A cross-site scripting vulnerability exists in Flatboard Pro versions prior to 3.2.2, which stems from insufficient validation of inputs to the footertext and announcement parameters in config.php, and could lead to a stored cross-site...

5.1CVSS5.8AI score0.00276EPSS
Exploits0References1
VulnCheck KEV
VulnCheck KEV
added 2024/04/01 12:0 a.m.2 views

VulnCheck KEV: CVE-2024-2848

The Responsive theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the savefootertextcallback function in all versions up to, and including, 5.0.2. This makes it possible for unauthenticated attackers to inject arbitrary HTML content into...

7.5CVSS7.4AI score0.00657EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/03/29 12:0 a.m.3 views

PT-2024-22447 · WordPress · Responsive

Name of the Vulnerable Software and Affected Versions: The Responsive theme for WordPress versions up to, and including, 5.0.2 Description: The issue allows unauthorized modification of data due to a missing capability check on the save footer text callback function. This makes it possible for...

7.5CVSS9.4AI score0.00657EPSS
Exploits0References8
OSV
OSV
added 2022/04/28 4:15 p.m.1 views

CVE-2022-27860

Cross-Site Request Forgery CSRF leading to Cross-Site Scripting XSS in Shea Bunge's Footer Text plugin = 2.0.3 on WordPress...

6.1CVSS5.8AI score0.00358EPSS
Exploits0References2
NVD
NVD
added 2022/04/28 4:15 p.m.16 views

CVE-2022-27860

Cross-Site Request Forgery CSRF leading to Cross-Site Scripting XSS in Shea Bunge's Footer Text plugin = 2.0.3 on WordPress...

6.1CVSS0.00358EPSS
Exploits0References2
Prion
Prion
added 2022/04/28 4:15 p.m.15 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF leading to Cross-Site Scripting XSS in Shea Bunge's Footer Text plugin = 2.0.3 on WordPress...

4.3CVSS6.2AI score0.00358EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/04/28 3:32 p.m.5 views

CVE-2022-27860 WordPress Footer Text plugin <= 2.0.3 - Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF leading to Cross-Site Scripting XSS in Shea Bunge's Footer Text plugin = 2.0.3 on WordPress...

6.1CVSS6.2AI score0.00358EPSS
Exploits0References2
CVE
CVE
added 2022/04/28 3:32 p.m.73 views

CVE-2022-27860

CVE-2022-27860 affects the WordPress plugin Footer Text (versions

6.1CVSS6.3AI score0.00358EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/04/28 3:32 p.m.19 views

CVE-2022-27860 WordPress Footer Text plugin <= 2.0.3 - Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF leading to Cross-Site Scripting XSS in Shea Bunge's Footer Text plugin = 2.0.3 on WordPress...

6.1CVSS6.4AI score0.00358EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/04/28 9:52 a.m.1 views

CVE-2022-27860

Cross-Site Request Forgery CSRF leading to Cross-Site Scripting XSS in Shea Bunge's Footer Text plugin = 2.0.3 on WordPress...

6.1CVSS6.1AI score0.00358EPSS
Exploits0References3Affected Software1
Patchstack
Patchstack
added 2022/04/28 12:0 a.m.23 views

WordPress Footer Text plugin <= 2.0.3 - Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF leading to Cross-Site Scripting XSS vulnerability discovered by Rasi Afeef in WordPress Footer Text plugin versions = 2.0.3. Solution No patched version is available. No response from the vendor...

6.1CVSS2.2AI score0.00358EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2022/04/28 12:0 a.m.2 views

WordPress plugin Footer Text 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Footer Text plugin version 2.0.3 and earlier versions...

6.1CVSS5.2AI score0.00358EPSS
Exploits0References3
CNVD
CNVD
added 2021/11/10 12:0 a.m.18 views

WordPress Storefront Footer Text plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress Storefront Footer Text plugin in version 1.0.1 an...

4.8CVSS4.9AI score0.00598EPSS
Exploits2References1
NVD
NVD
added 2021/11/08 6:15 p.m.9 views

CVE-2021-24607

The Storefront Footer Text WordPress plugin through 1.0.1 does not sanitize and escape the "Footer Credit Text" added to pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered-html capability is disallowed...

4.8CVSS0.00598EPSS
Exploits2References1
OSV
OSV
added 2021/11/08 6:15 p.m.2 views

CVE-2021-24607

The Storefront Footer Text WordPress plugin through 1.0.1 does not sanitize and escape the "Footer Credit Text" added to pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered-html capability is disallowed...

4.8CVSS5.8AI score
Exploits0References1
Prion
Prion
added 2021/11/08 6:15 p.m.12 views

Cross site scripting

The Storefront Footer Text WordPress plugin through 1.0.1 does not sanitize and escape the "Footer Credit Text" added to pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered-html capability is disallowed...

3.5CVSS4.7AI score0.00598EPSS
Exploits2References1Affected Software1
CVE
CVE
added 2021/11/08 5:34 p.m.55 views

CVE-2021-24607

The CVE concerns the WordPress Storefront Footer Text plugin (versions Customize) and payloads, indicating frontend and admin areas can be affected. Remediation/action: deactivate and delete the plugin, as PatchStack notes the plugin is closed for review since 2021-10-06. No explicit exploit sta...

4.8CVSS4.7AI score0.00598EPSS
Exploits2References1Affected Software1
Cvelist
Cvelist
added 2021/11/08 5:34 p.m.16 views

CVE-2021-24607 Storefront Footer Text <= 1.0.1 - Admin+ Stored Cross-Site Scripting

The Storefront Footer Text WordPress plugin through 1.0.1 does not sanitize and escape the "Footer Credit Text" added to pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered-html capability is disallowed...

5AI score0.00598EPSS
Exploits2References1
CNNVD
CNNVD
added 2021/11/08 12:0 a.m.2 views

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress Storefront Footer Text plugin in version 1.0.1 an...

4.8CVSS5.6AI score0.00598EPSS
Exploits2References2
Rows per page
Query Builder