Lucene search
+L

67 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•6 views

CVE-2025-58992: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in impleCode Product Catalog Simple post-type-x allows Stored XSS.This issue affects Product Catalog Simple: from n/a through = 1.8.2...

6.5CVSS5.8AI score0.0021EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/06/19 3:20 p.m.•18 views

CVE-2025-49331

Deserialization of Untrusted Data vulnerability in impleCode eCommerce Product Catalog ecommerce-product-catalog allows Object Injection.This issue affects eCommerce Product Catalog: from n/a through = 3.4.3...

7.2CVSS5.9AI score0.00518EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/17 12:00 a.m.•6 views

CVE-2025-49331: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in impleCode eCommerce Product Catalog ecommerce-product-catalog allows Object Injection.This issue affects eCommerce Product Catalog: from n/a through = 3.4.3...

7.2CVSS5.8AI score0.00518EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/08 1:19 p.m.•14 views

CVE-2025-49305

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in impleCode Product Catalog Simple post-type-x allows Stored XSS.This issue affects Product Catalog Simple: from n/a through = 1.8.1...

6.5CVSS5.9AI score0.00252EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/06 1:15 p.m.•16 views

CVE-2025-49305

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in impleCode Product Catalog Simple post-type-x allows Stored XSS.This issue affects Product Catalog Simple: from n/a through = 1.8.1...

6.5CVSS0.00252EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/06/06 12:00 a.m.•10 views

PT-2025-24233 · Implecode · Implecode Product Catalog Simple

Name of the Vulnerable Software and Affected Versions: impleCode Product Catalog Simple versions 1.8.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can...

6.5CVSS6.1AI score0.00252EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/06 12:00 a.m.•4 views

CVE-2025-49305: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in impleCode Product Catalog Simple post-type-x allows Stored XSS.This issue affects Product Catalog Simple: from n/a through = 1.8.1...

6.5CVSS5.8AI score0.00252EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 8:37 a.m.•14 views

CVE-2024-32437

Cross-Site Request Forgery CSRF vulnerability in impleCode eCommerce Product Catalog.This issue affects eCommerce Product Catalog: from n/a through 3.3.28...

4.3CVSS5.1AI score0.00212EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 5:15 a.m.•18 views

CVE-2023-47839

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in impleCode eCommerce Product Catalog Plugin for WordPress plugin = 3.3.26 versions...

6.5CVSS6.9AI score0.00409EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:59 a.m.•13 views

CVE-2023-51687

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in impleCode Product Catalog Simple.This issue affects Product Catalog Simple: from n/a through 1.7.6...

7.5CVSS7.8AI score0.0048EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/26 12:15 p.m.•42 views

CVE-2024-32822

Missing Authorization vulnerability in impleCode Reviews Plus.This issue affects Reviews Plus: from n/a through 1.3.4...

4.3CVSS4.7AI score0.00337EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/26 11:21 a.m.•103 views

CVE-2024-32822

Technical details for CVE-2024-32822 are not provided in the supplied documents. No affected product/version or remediation details are disclosed here. Monitor for official advisories to obtain exact impact and fixes.

4.3CVSS5.1AI score0.00337EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/26 11:21 a.m.•29 views

CVE-2024-32822 WordPress Reviews Plus plugin <= 1.3.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in impleCode Reviews Plus.This issue affects Reviews Plus: from n/a through 1.3.4...

4.3CVSS6.9AI score0.00337EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/04/26 12:00 a.m.•15 views

PT-2024-24897 · Unknown · Implecode Reviews Plus

Name of the Vulnerable Software and Affected Versions: impleCode Reviews Plus versions 1.3.4 and earlier Description: A Missing Authorization vulnerability has been identified in impleCode Reviews Plus. This issue allows unauthorized access, potentially leading to data breaches or other security...

4.3CVSS6.6AI score0.00337EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/26 12:00 a.m.•4 views

CVE-2024-32822: Missing Authorization

Missing Authorization vulnerability in impleCode Reviews Plus.This issue affects Reviews Plus: from n/a through 1.3.4...

4.3CVSS5.8AI score0.00337EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/04/18 10:08 a.m.•32 views

CVE-2024-32558 WordPress eCommerce Product Catalog plugin <= 3.3.32 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in impleCode eCommerce Product Catalog allows Reflected XSS.This issue affects eCommerce Product Catalog: from n/a through 3.3.32...

7.1CVSS6.9AI score0.00371EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/18 10:08 a.m.•34 views

CVE-2024-32558 WordPress eCommerce Product Catalog plugin <= 3.3.32 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in impleCode eCommerce Product Catalog allows Reflected XSS.This issue affects eCommerce Product Catalog: from n/a through 3.3.32...

7.1CVSS7.1AI score0.00371EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/18 12:00 a.m.•4 views

CVE-2024-32558: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in impleCode eCommerce Product Catalog allows Reflected XSS.This issue affects eCommerce Product Catalog: from n/a through 3.3.32...

7.1CVSS5.8AI score0.00371EPSS
SaveExploits0References2
NVD
NVD
•added 2024/04/15 9:15 a.m.•35 views

CVE-2024-32437

Cross-Site Request Forgery CSRF vulnerability in impleCode eCommerce Product Catalog.This issue affects eCommerce Product Catalog: from n/a through 3.3.28...

4.3CVSS4.6AI score0.00212EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/15 8:07 a.m.•80 views

CVE-2024-32437

CVE-2024-32437 is a Cross-Site Request Forgery (CSRF) vulnerability in the impleCode eCommerce Product Catalog WordPress plugin. It affects the plugin for “eCommerce Product Catalog: from n/a through 3.3.28.” The root cause is CSRF, requiring user interaction to exploit, potentially enabling unau...

4.3CVSS5.1AI score0.00212EPSS
SaveExploits0References1
Rows per page
Query Builder