Lucene search
+L

3950 matches found

Vulnrichment
Vulnrichment
•added 2024/11/19 4:31 p.m.•21 views

CVE-2024-51828 WordPress Beacon For Help Scout plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dan Griffiths Beacon For Help Scout beacon-for-helpscout allows DOM-Based XSS.This issue affects Beacon For Help Scout: from n/a through = 1.3.0...

6.5CVSS7.2AI score0.00377EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/19 4:31 p.m.•66 views

CVE-2024-51910

CVE-2024-51910 is a DOM-based XSS in Mauro Cordioli’s Assist24 Help Desk WordPress plugin (vulnerable through 20150401.2). Root cause: improper input neutralization during web page generation. Affected software: Assist24 Help Desk (WordPress plugin). Impact: Cross-site scripting via crafted input...

6.5CVSS7.2AI score0.00297EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/19 4:31 p.m.•34 views

CVE-2024-51910 WordPress Assist24 Help Desk plugin <= 20150401.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ezlab Assist24 Help Desk assist24it allows DOM-Based XSS.This issue affects Assist24 Help Desk: from n/a through = 20150401.2...

6.5CVSS0.00297EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/19 4:31 p.m.•11 views

CVE-2024-51910 WordPress Assist24 Help Desk plugin <= 20150401.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mauro Cordioli Assist24 Help Desk allows DOM-Based XSS.This issue affects Assist24 Help Desk: from n/a through 20150401.2...

6.5CVSS6.9AI score0.00297EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•4 views

CVE-2024-51828: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dan Griffiths Beacon For Help Scout beacon-for-helpscout allows DOM-Based XSS.This issue affects Beacon For Help Scout: from n/a through = 1.3.0...

6.5CVSS5.8AI score0.00377EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•2 views

CVE-2024-51910: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ezlab Assist24 Help Desk assist24it allows DOM-Based XSS.This issue affects Assist24 Help Desk: from n/a through = 20150401.2...

6.5CVSS5.8AI score0.00297EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/19 12:00 a.m.•12 views

WordPress plugin Assist24 Help Desk 跨站脚本漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress plugin...

6.5CVSS7.6AI score0.00297EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/19 12:00 a.m.•11 views

WordPress plugin Beacon For Help Scout 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS7.6AI score0.00377EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/19 12:00 a.m.•14 views

PT-2024-35043 · Mauro Cordioli · Assist24 Help Desk

Name of the Vulnerable Software and Affected Versions: Mauro Cordioli Assist24 Help Desk versions from n/a through 20150401.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for DOM-Based XSS attacks...

6.5CVSS6AI score0.00297EPSS
SaveExploits0References3
NVD
NVD
•added 2024/11/14 7:15 p.m.•21 views

CVE-2024-52370

Unrestricted Upload of File with Dangerous Type vulnerability in Hive Support Hive Support hive-support allows Upload a Web Shell to a Web Server.This issue affects Hive Support: from n/a through = 1.1.1...

9.9CVSS0.00492EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/14 6:13 p.m.•60 views

CVE-2024-52370

CVE-2024-52370 concerns the WordPress plugin “Hive Support – WordPress Help Desk.” The vulnerability is described as Unrestricted Upload of File with Dangerous Type, enabling an attacker to upload a web shell to the web server. Affected versions are Hive Support – WordPress Help Desk up to 1.1.1....

9.9CVSS7.2AI score0.00492EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/14 12:00 a.m.•13 views

PT-2024-35207 · WordPress · Hive Support – Wordpress Help Desk

Name of the Vulnerable Software and Affected Versions: Hive Support – WordPress Help Desk versions 1.1.1 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, potentially enabling an attacker to upload a web shell to a web server. This could grant an...

9.9CVSS9.7AI score0.00492EPSS
SaveExploits0References6
OSV
OSV
•added 2024/11/12 12:18 p.m.•8 views

MAL-2024-10605 Malicious code in @david-lab/sol-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0b5dba42ccf786e68c3da9ea3c922e86a77057afd355a7b4534b190ef156e0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Patchstack
Patchstack
•added 2024/11/11 12:00 a.m.•21 views

WordPress Hive Support – WordPress Help Desk Plugin <= 1.1.1 is vulnerable to Arbitrary File Upload

Software Hive Support – WordPress Help Desk Type Plugin Vulnerable versions = 1.1.1 Fixed in 1.1.2 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-52370 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 6b874f7d4e45 Credits stealthcopter Requir...

9.9CVSS9.6AI score0.00492EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2024/11/09 1:15 p.m.•22 views

CVE-2024-51670

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JoomSky JS Help Desk js-support-ticket allows Stored XSS.This issue affects JS Help Desk: from n/a through = 2.8.7...

5.9CVSS0.0026EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/09 1:15 p.m.•11 views

CVE-2024-51670

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Stored XSS.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.7...

4.8CVSS5.8AI score0.0026EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/09 1:06 p.m.•37 views

CVE-2024-51670 WordPress JS Help Desk plugin <= 2.8.7 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JoomSky JS Help Desk js-support-ticket allows Stored XSS.This issue affects JS Help Desk: from n/a through = 2.8.7...

5.9CVSS0.0026EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/09 1:06 p.m.•77 views

CVE-2024-51670

CVE-2024-51670 – JS Help Desk WordPress Plugin : Affected plugin versions are

5.9CVSS5.9AI score0.0026EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/09 1:06 p.m.•16 views

CVE-2024-51670 WordPress JS Help Desk plugin <= 2.8.7 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JoomSky JS Help Desk js-support-ticket allows Stored XSS.This issue affects JS Help Desk: from n/a through = 2.8.7...

5.9CVSS5.9AI score0.0026EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/09 10:15 a.m.•35 views

CVE-2024-51778

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tevya Satisfaction Reports from Help Scout happiness-reports-for-help-scout allows Reflected XSS.This issue affects Satisfaction Reports from Help Scout: from n/a through = 2.0.3...

7.1CVSS0.0027EPSS
SaveExploits0References1
Rows per page
Query Builder