3 matches found
EUVD-2022-15516
Malicious code in bioql PyPI...
4.8CVSS5.1AI score0.00647EPSS
SaveExploits2References2
CVE-2022-0360
The Easy Drag And drop All Import : WP Ultimate CSV Importer WordPress plugin before 6.4.3 does not sanitise and escaped imported comments, which could allow high privilege users to import malicious ones either intentionnaly or not and lead to Stored Cross-Site Scripting issues...
4.8CVSS5.5AI score0.00647EPSS
SaveExploits2References3
WordPress plugin 跨站脚本漏洞
WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. cross-site scripting vulnerability exists in versions of WordPress WP Ultimate CSV Importer plugin prior to 6.4.3...
4.8CVSS5.2AI score0.00647EPSS
SaveExploits2References3
20