Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-23528

Malicious code in bioql PyPI...

5.5CVSS6.5AI score0.00121EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/23 2:31 a.m.2 views

CVE-2023-1259

The Hotjar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the hotjarsiteid in versions up to, and including, 1.0.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above...

5.5CVSS5AI score0.00121EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/03/24 12:0 a.m.2 views

WordPress plugin WP Hotjar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

5.9CVSS8AI score0.00059EPSS
Exploits0References2
OSV
OSV
added 2023/10/14 12:15 p.m.0 views

CVE-2023-1259

The Hotjar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the hotjarsiteid in versions up to, and including, 1.0.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above...

5.5CVSS7.3AI score
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2023/10/14 12:15 p.m.1 views

CVE-2023-1259

The Hotjar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the hotjarsiteid in versions up to, and including, 1.0.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above...

5.5CVSS6AI score0.00121EPSS
Exploits1References3
Prion
Prion
added 2023/10/14 12:15 p.m.15 views

Cross site scripting

The Hotjar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the hotjarsiteid in versions up to, and including, 1.0.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above...

4.7CVSS5.2AI score0.00121EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/14 11:9 a.m.4 views

CVE-2023-1259

The Hotjar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the hotjarsiteid in versions up to, and including, 1.0.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above...

4.4CVSS5.1AI score0.00121EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/10/14 12:0 a.m.2 views

PT-2023-16843 · WordPress · Hotjar Plugin

Name of the Vulnerable Software and Affected Versions: Hotjar plugin for WordPress versions up to, and including, 1.0.15 Description: The issue arises from insufficient input sanitization and output escaping, allowing authenticated attackers with administrator-level permissions to inject arbitrar...

5.5CVSS6.2AI score0.00121EPSS
Exploits1References4
Rows per page
Query Builder