Lucene search
+L

5509 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/20 12:00 a.m.•6 views

CVE-2018-20978: Improper Neutralization of Input During Web Page Generation

The wp-all-import plugin before 3.4.7 for WordPress has XSS...

6.1CVSS5.7AI score0.00905EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/20 12:00 a.m.•5 views

CVE-2017-18567: Improper Neutralization of Input During Web Page Generation

The wp-all-import plugin before 3.4.6 for WordPress has XSS...

6.1CVSS5.7AI score0.00905EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/20 12:00 a.m.•5 views

CVE-2019-14430: Improper Neutralization of Special Elements used in an SQL Command

plugin/Audit/Objects/AuditTable.php in YouPHPTube through 7.2 allows SQL Injection...

5.3CVSS5.8AI score0.02984EPSS
SaveExploits5References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/20 12:00 a.m.•7 views

CVE-2017-18568: Improper Neutralization of Input During Web Page Generation

The my-wp-translate plugin before 1.0.4 for WordPress has XSS...

6.1CVSS5.7AI score0.00905EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/20 12:00 a.m.•5 views

CVE-2016-10913: Improper Neutralization of Input During Web Page Generation

The wp-latest-posts plugin before 3.7.5 for WordPress has XSS...

6.1CVSS5.7AI score0.00913EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/20 12:00 a.m.•4 views

CVE-2017-18529: Improper Neutralization of Input During Web Page Generation

The promobar plugin before 1.1.1 for WordPress has multiple XSS issues...

6.1CVSS5.7AI score0.01621EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/20 12:00 a.m.•4 views

CVE-2017-18532: Improper Neutralization of Input During Web Page Generation

The realty plugin before 1.1.0 for WordPress has multiple XSS issues...

6.1CVSS5.7AI score0.01441EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/14 12:00 a.m.•6 views

CVE-2016-10881: Improper Neutralization of Input During Web Page Generation

The google-document-embedder plugin before 2.6.2 for WordPress has XSS...

6.1CVSS5.7AI score0.00951EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/14 12:00 a.m.•7 views

CVE-2019-0337: Improper Neutralization of Input During Web Page Generation

Java Proxy Runtime of SAP NetWeaver Process Integration, versions 7.10, 7.11, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs and allows an attacker to execute malicious scripts in the url thereby resulting in Reflected Cross-Site Scripting XSS vulnerability...

6.1CVSS8.3AI score0.00843EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/13 12:00 a.m.•4 views

CVE-2015-9302: Improper Neutralization of Input During Web Page Generation

The simple-fields plugin before 1.4.11 for WordPress has XSS...

6.1CVSS5.7AI score0.00951EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/13 12:00 a.m.•6 views

CVE-2015-9300: Improper Neutralization of Input During Web Page Generation

The events-manager plugin before 5.5.7 for WordPress has multiple XSS issues...

6.1CVSS5.7AI score0.00923EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/13 12:00 a.m.•5 views

CVE-2015-9297: Improper Neutralization of Input During Web Page Generation

The events-manager plugin before 5.6 for WordPress has XSS...

6.1CVSS5.7AI score0.00924EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/12 12:00 a.m.•3 views

CVE-2019-14967: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Frappe Framework 10, 11 before 11.1.46, and 12. There exists an XSS vulnerability...

6.1CVSS5.7AI score0.01231EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/12 12:00 a.m.•4 views

CVE-2019-14945: Improper Neutralization of Input During Web Page Generation

The ultimate-member plugin before 2.0.54 for WordPress has XSS...

5.4CVSS5.7AI score0.00882EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/12 12:00 a.m.•2 views

CVE-2017-18501: Improper Neutralization of Input During Web Page Generation

The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues...

6.1CVSS5.7AI score0.0141EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/12 12:00 a.m.•4 views

CVE-2017-18503: Improper Neutralization of Input During Web Page Generation

The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS...

6.1CVSS5.7AI score0.00922EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/12 12:00 a.m.•6 views

CVE-2016-10873: Improper Neutralization of Input During Web Page Generation

The wp-database-backup plugin before 4.3.3 for WordPress has XSS...

6.1CVSS5.7AI score0.00924EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/12 12:00 a.m.•6 views

CVE-2016-10875: Improper Neutralization of Input During Web Page Generation

The wp-database-backup plugin before 4.3.1 for WordPress has XSS...

6.1CVSS5.7AI score0.00924EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/02 12:00 a.m.•7 views

CVE-2017-18400: Improper Neutralization of Special Elements used in a Command

cPanel before 68.0.15 allows local root code execution via cpdavd SEC-333...

7.8CVSS6AI score0.00549EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/29 12:00 a.m.•5 views

CVE-2019-1020010: Improper Neutralization of Input During Web Page Generation

Misskey before 10.102.4 allows hijacking a user's token...

6.1CVSS5.8AI score0.01263EPSS
SaveExploits1References2
Rows per page
Query Builder