Lucene search
+L

14 matches found

Nuclei
Nuclei
•added 2026/10/12 2:21 a.m.•31 views

iBuildApp <= 0.2.0 - Reflected Cross-Site Scripting

iBuildApp WordPress plugin through 0.2.0 contains a reflected cross-site scripting caused by unsanitized parameter output in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a malicious URL. id: CVE-2024-13326 info:...

6.1CVSS7.9AI score0.00584EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2024-51531

Malicious code in bioql PyPI...

6.1CVSS8.7AI score0.00584EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/08 4:36 a.m.•21 views

CVE-2024-13326

The iBuildApp WordPress plugin through 0.2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS6AI score0.00584EPSS
SaveExploits1References1
Patchstack
Patchstack
•added 2025/02/04 10:19 p.m.•18 views

WordPress iBuildApp plugin <= 0.2.0 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin iBuildApp versions = 0.2.0...

6.1CVSS6.4AI score0.00584EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2025/02/04 6:15 a.m.•21 views

CVE-2024-13326

The iBuildApp WordPress plugin through 0.2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS7.3AI score0.00584EPSS
SaveExploits1References1
NVD
NVD
•added 2025/02/04 6:15 a.m.•45 views

CVE-2024-13326

The iBuildApp WordPress plugin through 0.2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS0.00584EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/02/04 6:00 a.m.•9 views

CVE-2024-13326 iBuildApp <= 0.2.0 - Reflected XSS

The iBuildApp WordPress plugin through 0.2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1AI score0.00584EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/02/04 6:00 a.m.•48 views

CVE-2024-13326 iBuildApp <= 0.2.0 - Reflected XSS

The iBuildApp WordPress plugin through 0.2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

0.00584EPSS
SaveExploits1References1
CVE
CVE
•added 2025/02/04 6:00 a.m.•80 views

CVE-2024-13326

The iBuildApp WordPress plugin (versions 0.2.0 and earlier ) is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability due to improper sanitization and escaping of a parameter before it is outputted back in the page. An attacker can exploit this by crafting a malicious URL to execute ...

6.1CVSS6.2AI score0.00584EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/02/04 12:00 a.m.•19 views

PT-2025-2112

Name of the Vulnerable Software and Affected Versions iBuildApp WordPress plugin versions 0.2.0 and earlier Description The issue is related to a Reflected Cross-Site Scripting problem, where a parameter is not properly sanitized and escaped before being outputted back in the page. This could be...

6.1CVSS5.4AI score0.00584EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2025/02/04 12:00 a.m.•20 views

WordPress plugin iBuildApp 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.1CVSS7.7AI score0.00584EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/04 12:00 a.m.•4 views

CVE-2024-13326: Improper Neutralization of Input During Web Page Generation

The iBuildApp WordPress plugin through 0.2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS5.8AI score0.00584EPSS
SaveExploits1References1
Openbugbounty
Openbugbounty
•added 2018/11/27 7:31 a.m.•20 views

china.ibuildapp.com XSS vulnerability

Open Bug Bounty ID: OBB-703572 Description| Value ---|--- Affected Website:| china.ibuildapp.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

SaveExploits0
Openbugbounty
Openbugbounty
•added 2018/11/27 7:30 a.m.•21 views

russia.ibuildapp.com XSS vulnerability

Open Bug Bounty ID: OBB-703571 Description| Value ---|--- Affected Website:| russia.ibuildapp.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

SaveExploits0
Rows per page
Query Builder