Lucene search
+L

11729 matches found

Vulnrichment
Vulnrichment
added 2025/10/06 6:00 a.m.3 views

CVE-2025-9710 Responsive Lightbox & Gallery < 2.5.3 - Unauthenticated Stored-XSS via Comments

The Responsive Lightbox & Gallery WordPress plugin before 2.5.3 does not properly handle HTML tag attributes modifications, potentially allowing unauthenticated attackers to abuse the functionality to include event handlers and conduct Stored XSS attacks...

5.6AI score0.00199EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/06 12:00 a.m.14 views

PT-2025-40854

Name of the Vulnerable Software and Affected Versions Responsive Lightbox & Gallery WordPress plugin versions prior to 2.5.3 Description The software does not properly handle HTML tag attribute modifications, which could allow unauthenticated attackers to include event handlers and conduct Stored...

6.3CVSS5.2AI score0.00199EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/10/06 12:00 a.m.9 views

WordPress plugin Responsive Lightbox & Gallery 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security...

6.3CVSS5.7AI score0.00199EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/05 3:37 a.m.12 views

CVE-2025-10383

The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple form field parameters in all versions up to, and including, 27.0.2. This is due to insufficient input sanitization and output escaping on user-supplied...

6.4CVSS5.1AI score0.00232EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/04 6:30 a.m.9 views

EUVD-2025-32405

The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple form field parameters in all versions up to, and including, 27.0.2. This is due to insufficient input sanitization and output escaping on user-supplied...

6.4CVSS4.7AI score0.00232EPSS
SaveExploits0References8
NVD
NVD
added 2025/10/04 4:16 a.m.13 views

CVE-2025-10383

The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple form field parameters in all versions up to, and including, 27.0.2. This is due to insufficient input sanitization and output escaping on user-supplied...

6.4CVSS0.00232EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2025/10/04 3:33 a.m.6 views

CVE-2025-10383 Contest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.2 - Authenticated (Author+) Stored Cross-Site Scripting

The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple form field parameters in all versions up to, and including, 27.0.2. This is due to insufficient input sanitization and output escaping on user-supplied...

6.4CVSS4.8AI score0.00232EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2025/10/04 3:33 a.m.22 views

CVE-2025-10383 Contest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.2 - Authenticated (Author+) Stored Cross-Site Scripting

The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple form field parameters in all versions up to, and including, 27.0.2. This is due to insufficient input sanitization and output escaping on user-supplied...

6.4CVSS0.00232EPSS
SaveExploits0References7
CVE
CVE
added 2025/10/04 3:33 a.m.21 views

CVE-2025-10383

CVE-2025-10383 : The WordPress plugin “Contest Gallery – Upload, Vote & Sell with PayPal and Stripe” is affected by a stored cross-site scripting vulnerability in multiple form fields. Affected versions are all up to and including 27.0.2. Attack scenario: authenticated attackers with author-level...

6.4CVSS4.8AI score0.00232EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/10/04 12:00 a.m.8 views

WordPress plugin Contest Gallery – Upload, Vote & Sell with PayPal and Stripe 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL based...

6.4CVSS5.7AI score0.00232EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/10/04 12:00 a.m.17 views

PT-2025-40623

Name of the Vulnerable Software and Affected Versions The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress versions prior to 27.0.3 Description The software is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping of...

6.4CVSS5.5AI score0.00232EPSS
SaveExploits0References12
Patchstack
Patchstack
added 2025/10/03 11:55 p.m.10 views

WordPress Contest Gallery plugin <= 27.0.2 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by Aurélien BOURDOIS Elymaro in WordPress Plugin Contest Gallery versions = 27.0.2...

6.4CVSS5.5AI score0.00232EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2025/10/03 8:07 p.m.6 views

EUVD-2022-48269

Malicious code in bioql PyPI...

8.8CVSS9AI score0.00256EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.12 views

EUVD-2023-23344

Malicious code in bioql PyPI...

9.8CVSS5.5AI score0.00463EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2022-51516

Malicious code in bioql PyPI...

4.9CVSS5.2AI score0.00846EPSS
SaveExploits2References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2023-12946

Malicious code in bioql PyPI...

9.8CVSS6.8AI score0.01883EPSS
SaveExploits5References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2023-35089

Malicious code in bioql PyPI...

5.5CVSS5.8AI score0.0016EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2023-49390

Malicious code in bioql PyPI...

9.8CVSS9AI score0.00551EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2025-7310

Malicious code in bioql PyPI...

6.1CVSS4.8AI score0.00334EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/03 8:07 p.m.17 views

EUVD-2022-51435

Malicious code in bioql PyPI...

5.4CVSS5.6AI score0.00244EPSS
SaveExploits2References1
Rows per page
Query Builder