Lucene search
K

8 matches found

OSV
OSV
added 2024/03/26 4:15 p.m.0 views

CVE-2024-29832

The currenturl parameter of the AJAX call to the GalleryBox action of admin-ajax.php is vulnerable to reflected Cross Site Scripting. The value of the currenturl parameter is embedded within an existing JavaScript within the response allowing arbitrary JavaScript to be inserted and executed. No...

6.1CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2024/03/26 4:15 p.m.6 views

CVE-2024-29832

The currenturl parameter of the AJAX call to the GalleryBox action of admin-ajax.php is vulnerable to reflected Cross Site Scripting. The value of the currenturl parameter is embedded within an existing JavaScript within the response allowing arbitrary JavaScript to be inserted and executed. No...

6.1CVSS6.4AI score0.00132EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/03/26 3:24 p.m.17 views

CVE-2024-29832 WordPress Photo Gallery Plugin <= 1.8.21 Unauthenticated Reflected Cross Site Scripting in GalleryBox current_url

The currenturl parameter of the AJAX call to the GalleryBox action of admin-ajax.php is vulnerable to reflected Cross Site Scripting. The value of the currenturl parameter is embedded within an existing JavaScript within the response allowing arbitrary JavaScript to be inserted and executed. No...

6.1CVSS6.6AI score0.00132EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/03/26 12:0 a.m.1 views

PT-2024-23071 · WordPress · Admin-Ajax.Php

Name of the Vulnerable Software and Affected Versions: admin-ajax.php affected versions not specified Description: The issue concerns a reflected Cross Site Scripting vulnerability in the "current url" parameter of the AJAX call to the "GalleryBox" action of admin-ajax.php. This allows an attacke...

6.1CVSS9.3AI score0.00132EPSS
Exploits1References6
Openbugbounty
Openbugbounty
added 2018/02/26 1:2 a.m.16 views

blog.activ-investment.eu XSS vulnerability

Open Bug Bounty ID: OBB-568414 Description| Value ---|--- Affected Website:| blog.activ-investment.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| WordPress Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2018/02/26 12:14 a.m.16 views

sylvaniatownship.com XSS vulnerability

Open Bug Bounty ID: OBB-568372 Description| Value ---|--- Affected Website:| sylvaniatownship.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| WordPress Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2018/02/26 12:12 a.m.11 views

academia.subdere.gov.cl XSS vulnerability

Open Bug Bounty ID: OBB-568371 Description| Value ---|--- Affected Website:| academia.subdere.gov.cl Vulnerable Application:| WordPress Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosu...

6.2AI score
Exploits0
Packet Storm
Packet Storm
added 2015/03/30 12:0 a.m.22 views

Joomla Gallery WD SQL Injection

Exploit Title: Joomla Gallery WD - SQL Injection Vulnerability Google Dork: inurl:option=comgallerywd Date: 29.03.2015 Exploit Author: CrashBandicot @DosPerl Vendor HomePage: http://web-dorado.com/ Source Component :...

0.6AI score
Exploits0
Rows per page
Query Builder