Lucene search
+L

872 matches found

CNNVD
CNNVD
added 2025/03/03 12:00 a.m.5 views

WordPress plugin Page Health-O-Meter 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS5.6AI score0.00357EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/03 12:00 a.m.6 views

WordPress plugin Maniac SEO 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6AI score0.00357EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/03 12:00 a.m.8 views

WordPress plugin Guten Free Options 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

7.1CVSS5.9AI score0.00378EPSS
SaveExploits0References2
OSV
OSV
added 2025/02/25 3:15 p.m.7 views

CVE-2024-54444

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Elementor Elementor Website Builder allows Stored XSS. This issue affects Elementor Website Builder: from n/a through 3.25.10...

5.4CVSS7.3AI score0.00283EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/25 2:17 p.m.23 views

CVE-2025-26904 WordPress WP Responsive Auto Fit Text plugin <= 0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in galop WP Responsive Auto Fit Text wp-responsive-slab-text allows DOM-Based XSS.This issue affects WP Responsive Auto Fit Text: from n/a through = 0.2...

6.5CVSS0.00254EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/24 3:15 p.m.7 views

CVE-2025-27323

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jon Bishop WP About Author wp-about-author allows DOM-Based XSS.This issue affects WP About Author: from n/a through = 1.5...

6.5CVSS0.00212EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/02/24 12:00 a.m.5 views

PT-2025-7750 · Unknown · Ez Inlinkz Linkup

Name of the Vulnerable Software and Affected Versions: EZ InLinkz linkup versions 0.18 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based Cross-site Scripting XSS. This means that an attacker could potentially...

6.5CVSS8.9AI score0.00212EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/02/24 12:00 a.m.18 views

PT-2025-7713

Name of the Vulnerable Software and Affected Versions T-Soft E-Commerce versions prior to 5 Description The issue affects T-Soft E-Commerce, allowing Cross-Site Scripting XSS due to improper neutralization of input during web page generation. Recommendations For versions prior to 5, update to...

4.7CVSS5.4AI score0.00274EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/02/24 12:00 a.m.6 views

PT-2025-7725 · Unknown · Alobaidi Archive Page

Name of the Vulnerable Software and Affected Versions: Alobaidi Archive Page versions n/a through 1.0.1 Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability, specifically DOM-Based XSS...

6.5CVSS8.6AI score0.00262EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/02/24 12:00 a.m.8 views

WordPress plugin Quotes llama 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.7AI score0.00262EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/02/24 12:00 a.m.6 views

WordPress plugin Direct Checkout Button for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS7.6AI score0.00212EPSS
SaveExploits0References2
OSV
OSV
added 2025/02/17 12:15 p.m.10 views

CVE-2025-26775

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RealMag777 BEAR allows Stored XSS. This issue affects BEAR: from n/a through 1.1.4.4...

4.8CVSS7.3AI score0.00244EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/16 1:19 p.m.9 views

CVE-2025-24688

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brandtoss WP Mailster wp-mailster allows Reflected XSS.This issue affects WP Mailster: from n/a through = 1.8.20.0...

7.1CVSS7.2AI score0.0025EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/14 12:00 a.m.9 views

WordPress plugin Customize My Account for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS6AI score0.0025EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/02/13 12:00 a.m.13 views

PT-2025-7189

Name of the Vulnerable Software and Affected Versions: Elfsight Yottie Lite versions 1.3.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an attacker can inject malicio...

5.9CVSS8.4AI score0.00214EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/02/07 12:00 a.m.5 views

WordPress plugin Graceful Email Obfuscation 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

6.5CVSS8.1AI score0.00275EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/07 12:00 a.m.7 views

WordPress plugin External Video For Everybody 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

6.5CVSS8AI score0.00275EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/02/06 2:22 a.m.9 views

CVE-2025-22706

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iova.mihai Social Pug: Author Box allows Reflected XSS. This issue affects Social Pug: Author Box: from n/a through 1.0.0...

7.1CVSS8.6AI score0.00255EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 1:09 p.m.22 views

CVE-2024-25093

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Milan Petrovic GD Rating System allows Stored XSS.This issue affects GD Rating System: from n/a through 3.5...

7.1CVSS7AI score0.00398EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 9:16 a.m.13 views

CVE-2024-56065

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Reflected XSS.This issue affects WP2LEADS: from n/a through = 3.4.2...

7.1CVSS7.2AI score0.0026EPSS
SaveExploits0References1
Rows per page
Query Builder