Lucene search
+L

221 matches found

Patchstack
Patchstack
•added 2024/10/23 12:00 a.m.•14 views

Drupal Loft Data Grids module < 7.x-2.7,< 7.x-3.0 - Unauthenticated Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS vulnerability discovered by Juraj Nemec in WordPress Module Loft Data Grids versions 7.x-2.7,7.x-3.0...

7.1CVSS6.1AI score0.00507EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
•added 2024/10/23 12:00 a.m.•8 views

Drupal Loft Data Grids module < 7.x-2.7,< 7.x-3.0 - Unauthenticated XML External Entity (XXE) vulnerability

Unauthenticated XML External Entity XXE vulnerability discovered by Juraj Nemec in WordPress Module Loft Data Grids versions 7.x-2.7,7.x-3.0...

8.8CVSS7.1AI score0.07791EPSS
SaveExploits4References1Affected Software1
Patchstack
Patchstack
•added 2024/10/23 12:00 a.m.•15 views

Drupal Loft Data Grids module < 7.x-2.7,< 7.x-3.0 - Authenticated Cross Site Scripting (XSS) vulnerability

Authenticated Cross Site Scripting XSS vulnerability discovered by Juraj Nemec in WordPress Module Loft Data Grids versions 7.x-2.7,7.x-3.0...

5.4CVSS6.1AI score0.00344EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
•added 2024/10/23 12:00 a.m.•13 views

Drupal Loft Data Grids module < 7.x-2.7,< 7.x-3.0 - Authenticated Remote Code Execution (RCE) vulnerability

Authenticated Remote Code Execution RCE vulnerability discovered by Juraj Nemec in WordPress Module Loft Data Grids versions 7.x-2.7,7.x-3.0...

8.8CVSS7.5AI score0.00864EPSS
SaveExploits1References1Affected Software1
Wired Threat Level
Wired Threat Level
•added 2024/10/21 10:00 a.m.•17 views

US Government Says Relying on Chinese Lithium Batteries Is Too Risky

A new document shows the Department of Homeland Security is concerned that Chinese investment in lithium batteries to power energy grids will make them a threat to US supply chain security...

7.2AI score
SaveExploits0
Imperva Blog
Imperva Blog
•added 2024/09/12 7:52 p.m.•19 views

Enhancing Security and Compliance in the Energy Sector: Imperva’s Cipher Suite Support

In the energy and utility sector, safeguarding data and ensuring compliance with regulatory standards is paramount. With the increasing digitalization of operations, from smart grids to IoT-enabled devices, the need for robust encryption methods to protect sensitive information has never been...

7.2AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/04 12:00 a.m.•4 views

CVE-2024-8325: Improper Neutralization of Input During Web Page Generation

The Blockspare: Gutenberg Blocks & Patterns for Blogs, Magazines, Business Sites – Post Grids, Sliders, Carousels, Counters, Page Builder & Starter Site Imports, No Coding Needed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in the...

6.4CVSS6AI score0.00263EPSS
SaveExploits0References1
NVD
NVD
•added 2024/08/18 3:15 p.m.•37 views

CVE-2024-43305

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Code Amp Custom Layouts – Post + Product grids made easy allows Stored XSS.This issue affects Custom Layouts – Post + Product grids made easy: from n/a through 1.4.11...

6.5CVSS0.00253EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2024/08/18 3:15 p.m.•9 views

CVE-2024-43305

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Code Amp Custom Layouts – Post + Product grids made easy allows Stored XSS.This issue affects Custom Layouts – Post + Product grids made easy: from n/a through 1.4.11...

6.5CVSS5.2AI score0.00253EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/18 12:00 a.m.•1 views

CVE-2024-43305: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Code Amp Custom Layouts – Post + Product grids made easy allows Stored XSS.This issue affects Custom Layouts – Post + Product grids made easy: from n/a through 1.4.11...

6.5CVSS5.8AI score0.00253EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/08/18 12:00 a.m.•0 views

PT-2024-30472

Name of the Vulnerable Software and Affected Versions Custom Layouts – Post + Product grids made easy versions n/a through 1.4.11 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS. This...

6.5CVSS5.8AI score0.00253EPSS
SaveExploits0References7
Patchstack
Patchstack
•added 2024/08/16 11:50 a.m.•13 views

WordPress Custom Layouts – Post + Product grids made easy plugin <= 1.4.11 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by NGÔ THIÊN AN Patchstack Alliance in WordPress Plugin Custom Layouts – Post + Product grids made easy versions = 1.4.11...

6.5CVSS6.1AI score0.00253EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/08/16 12:00 a.m.•20 views

WordPress Custom Layouts – Post + Product grids made easy Plugin <= 1.4.11 is vulnerable to Cross Site Scripting (XSS)

Software Custom Layouts – Post + Product grids made easy Type Plugin Vulnerable versions = 1.4.11 Fixed in 1.4.12 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43305 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 657faa3ff7c6 Credits Ngô...

6.5CVSS6.6AI score0.00253EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2024/08/01 10:15 p.m.•33 views

CVE-2024-39665

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in YMC Filter & Grids allows Stored XSS.This issue affects Filter & Grids: from n/a through 2.9.2...

6.5CVSS0.00289EPSS
SaveExploits0References1
CVE
CVE
•added 2024/08/01 9:34 p.m.•64 views

CVE-2024-39665

CVE-2024-39665 is a stored XSS vulnerability in the WordPress plugin Filter & Grids (YMC Smart Filter) up to version 2.9.2, caused by improper neutralization of input during web page generation. Exploitation could arise from stored payloads affecting users; CVSS v3.1 base score is 6.5 (Medium). R...

6.5CVSS6.5AI score0.00289EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/08/01 9:34 p.m.•16 views

CVE-2024-39665 WordPress Filter & Grids plugin <= 2.9.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in YMC Filter & Grids allows Stored XSS.This issue affects Filter & Grids: from n/a through 2.9.2...

6.5CVSS6.8AI score0.00289EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/08/01 9:34 p.m.•26 views

CVE-2024-39665 WordPress Filter & Grids plugin <= 2.9.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in YMC Filter & Grids allows Stored XSS.This issue affects Filter & Grids: from n/a through 2.9.2...

6.5CVSS0.00289EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/08/01 3:13 p.m.•16 views

WordPress Filter & Grids plugin <= 2.9.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by RE-ALTER Patchstack Alliance in WordPress Plugin Filter & Grids versions = 2.9.2...

6.5CVSS6.1AI score0.00289EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/08/01 3:12 p.m.•26 views

WordPress Filter & Grids plugin <= 2.8.32 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by RE-ALTER Patchstack Alliance in WordPress Plugin Filter & Grids versions = 2.8.33...

7.3CVSS7AI score0.00416EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2024/08/01 12:00 a.m.•11 views

WordPress plugin Filter & Grids 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

6.5CVSS6.1AI score0.00289EPSS
SaveExploits0References2
Rows per page
Query Builder