Lucene search
+L

872 matches found

CNNVD
CNNVD
added 2026/01/08 12:00 a.m.8 views

WordPress plugin WP App Bar 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

7.1CVSS5.9AI score0.00152EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/08 12:00 a.m.9 views

WordPress plugin Famous 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

7.1CVSS6AI score0.00237EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/08 12:00 a.m.27 views

PT-2026-2195

Name of the Vulnerable Software and Affected Versions pencilwp X Addons for Elementor versions through 1.0.23 Description An issue exists in pencilwp X Addons for Elementor that allows for DOM-Based Cross-site Scripting XSS. This is due to improper neutralization of input during web page...

6.5CVSS6.6AI score0.00178EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/01/08 12:00 a.m.13 views

PT-2026-1926

Name of the Vulnerable Software and Affected Versions WP-BusinessDirectory versions through 3.1.5 Description The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to a Reflected Cross-site Scripting XSS condition. This allows for the injection of...

7.1CVSS6.1AI score0.00197EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/01/07 12:00 a.m.28 views

PT-2026-1653

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themesgrove WidgetKit Pro allows Reflected XSS.This issue affects WidgetKit Pro: from n/a through 1.13.1...

7.1CVSS6.4AI score0.00152EPSS
SaveExploits0References2
OSV
OSV
added 2026/01/06 9:15 p.m.11 views

CVE-2025-13744

An Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed attacker controlled HTML to be rendered by the Filter component search across GitHub that could be used to exfiltrate sensitive information. An attacker would requi...

5.4CVSS5.7AI score0.00185EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/01/05 12:00 a.m.11 views

PT-2026-1281

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in INTINITUM FORM Geo Controller allows DOM-Based XSS.This issue affects Geo Controller: from n/a through 8.5.2...

6.5CVSS6.4AI score0.00138EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/01/01 12:17 p.m.18 views

CVE-2025-62757

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebMan Design | Oliver Juhas WebMan Amplifier webman-amplifier allows DOM-Based XSS.This issue affects WebMan Amplifier: from n/a through = 1.5.12...

6.5CVSS5.9AI score0.0018EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/01 12:17 p.m.16 views

CVE-2025-62752

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kalender.digital Kalender.digital kalender-digital allows DOM-Based XSS.This issue affects Kalender.digital: from n/a through = 1.0.13...

6.5CVSS5.9AI score0.00175EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/01 9:12 a.m.15 views

CVE-2025-62759

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Justin Tadlock Series series allows Stored XSS.This issue affects Series: from n/a through = 2.0.1...

6.5CVSS5.9AI score0.00147EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/31 9:30 p.m.7 views

EUVD-2025-206070

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Proloy Chakroborty ZD Scribd iPaper allows Reflected XSS.This issue affects ZD Scribd iPaper: from n/a through 1.0...

7.1CVSS5.9AI score0.00155EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/31 11:53 a.m.8 views

EUVD-2025-205920

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebMan Design | Oliver Juhas WebMan Amplifier allows DOM-Based XSS.This issue affects WebMan Amplifier: from n/a through 1.5.12...

6.5CVSS5.9AI score0.0018EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/31 11:50 a.m.6 views

EUVD-2025-205922

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThinkUpThemes Consulting allows Stored XSS.This issue affects Consulting: from n/a through 1.5.0...

6.5CVSS5.5AI score0.00175EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/31 12:00 a.m.15 views

WordPress plugin Content Fetcher 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.9AI score0.00175EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/31 12:00 a.m.9 views

WordPress plugin和WordPress 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

7.1CVSS5.7AI score0.00155EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.8 views

PT-2025-54327

Name of the Vulnerable Software and Affected Versions Wayne Allen Postie versions through 1.9.73 Description The software contains a flaw related to improper input handling during web page generation, specifically a Stored Cross-site Scripting issue. This allows for the injection of malicious...

6.5CVSS5.9AI score0.00138EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.9 views

PT-2025-54401

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Omar Mohamed Mohamoud LIVE TV allows Reflected XSS.This issue affects LIVE TV: from n/a through 1.2...

7.1CVSS7.9AI score0.00202EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/31 12:00 a.m.13 views

WordPress plugin Audiomack 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.9AI score0.00134EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/30 4:17 p.m.8 views

EUVD-2025-205812

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yada Wiki yada-wiki allows Stored XSS.This issue affects Yada Wiki: from n/a through 3.5...

6.5CVSS5.5AI score0.00138EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/30 4:15 p.m.14 views

CVE-2025-64190

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 8theme XStore Core et-core-plugin allows DOM-Based XSS.This issue affects XStore Core: from n/a through 5.6...

6.5CVSS0.00138EPSS
SaveExploits0References1
Rows per page
Query Builder