Lucene search
K

21 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 8:56 a.m.5 views

CVE-2023-40330

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Milan Petrovic GD Security Headers plugin = 1.6.1 versions...

7.1CVSS5.9AI score0.00175EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-50987

Malicious code in bioql PyPI...

7.2CVSS7AI score0.00152EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-44917

Malicious code in bioql PyPI...

7.1CVSS7AI score0.00175EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:3 a.m.1 views

CVE-2023-46821

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Milan Petrovic GD Security Headers allows auth. admin+ SQL Injection.This issue affects GD Security Headers: from n/a through 1.7...

7.6CVSS7.3AI score0.00152EPSS
Exploits0References1
WPVulnDB
WPVulnDB
added 2023/11/16 12:0 a.m.16 views

GD Security Headers < 1.7.1 - Admin+ SQLi

Description The plugin does not properly sanitise and escape the filter-vd and filter-ed parameters before using them in SQL statements, leading to SQL injections exploitable by high privilege users such as admin...

7.2CVSS7.4AI score0.00152EPSS
Exploits0Affected Software1
NVD
NVD
added 2023/11/06 10:15 a.m.12 views

CVE-2023-46821

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Milan Petrovic GD Security Headers allows auth. admin+ SQL Injection.This issue affects GD Security Headers: from n/a through 1.7...

7.6CVSS7.4AI score0.00152EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/11/06 10:15 a.m.2 views

CVE-2023-46821

A vulnerability in Milan Petrovic GD Security Headers gd-security-headers.This issue affects GD Security Headers: from n/a through = 1.7...

7.6CVSS7AI score0.00152EPSS
Exploits0References3
Prion
Prion
added 2023/11/06 10:15 a.m.8 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Milan Petrovic GD Security Headers allows auth. admin+ SQL Injection.This issue affects GD Security Headers: from n/a through 1.7...

5.8CVSS7.9AI score0.00152EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/11/06 9:12 a.m.47 views

CVE-2023-46821

GD Security Headers WordPress plugin

7.6CVSS7.3AI score0.00152EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/06 9:12 a.m.14 views

CVE-2023-46821 WordPress GD Security Headers Plugin <= 1.7 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Milan Petrovic GD Security Headers allows auth. admin+ SQL Injection.This issue affects GD Security Headers: from n/a through 1.7...

7.6CVSS7.6AI score0.00152EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/11/06 9:12 a.m.16 views

CVE-2023-46821 WordPress GD Security Headers Plugin <= 1.7 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Milan Petrovic GD Security Headers allows auth. admin+ SQL Injection.This issue affects GD Security Headers: from n/a through 1.7...

7.6CVSS7.3AI score0.00152EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/11/06 12:0 a.m.2 views

WordPress Plugin GD Security Headers SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

7.2CVSS7.5AI score0.00152EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/11/06 12:0 a.m.3 views

PT-2023-30236 · Unknown · Gd Security Headers

Name of the Vulnerable Software and Affected Versions: GD Security Headers versions 1.7 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows authorized users with admin+ privileges to...

7.2CVSS8AI score0.00152EPSS
Exploits0References3
NVD
NVD
added 2023/09/27 3:19 p.m.9 views

CVE-2023-40330

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Milan Petrovic GD Security Headers plugin = 1.6.1 versions...

7.1CVSS6.2AI score0.00175EPSS
Exploits0References1
OSV
OSV
added 2023/09/27 3:19 p.m.0 views

CVE-2023-40330

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Milan Petrovic GD Security Headers plugin = 1.6.1 versions...

6.1CVSS7.3AI score
Exploits0References1
Prion
Prion
added 2023/09/27 3:19 p.m.11 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Milan Petrovic GD Security Headers plugin = 1.6.1 versions...

5.8CVSS6AI score0.00175EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/09/27 5:35 a.m.101 views

CVE-2023-40330

CVE-2023-40330 is an unauthenticated, reflected XSS vulnerability in the WordPress plugin GD Security Headers (versions

7.1CVSS6AI score0.00175EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/09/27 5:35 a.m.14 views

CVE-2023-40330 WordPress GD Security Headers Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Milan Petrovic GD Security Headers plugin = 1.6.1 versions...

7.1CVSS6.3AI score0.00175EPSS
Exploits0References1
WPVulnDB
WPVulnDB
added 2023/09/27 12:0 a.m.18 views

GD Security Headers < 1.7 - Reflected XSS

Description The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS5.7AI score0.00175EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/09/26 12:0 a.m.2 views

PT-2023-27391 · Milan Petrovic · Gd Security Headers

Name of the Vulnerable Software and Affected Versions: Milan Petrovic GD Security Headers plugin versions = 1.6.1 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing th...

7.1CVSS6.4AI score0.00175EPSS
Exploits0References6
Rows per page
Query Builder