Lucene search
+L

1119 matches found

CNNVD
CNNVD
•added 2026/06/04 12:00 a.m.•30 views

Progress Software’s several products have command injection vulnerabilities

Progress Software MOVEit is a product of the American company Progress Software. Progress Software MOVEit is a secure file transfer software. Progress Software LoadMaster is a series of application delivery controllers and load balancing products. Progress Software ECS Connections Manager is a...

9.8CVSS8.3AI score0.77362EPSS
SaveExploits6References1
CNNVD
CNNVD
•added 2026/04/24 12:00 a.m.•25 views

WordPress plugin ITERAS has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.4CVSS5.7AI score0.00435EPSS
SaveExploits0References1
CNVD
CNVD
•added 2026/04/10 12:00 a.m.•28 views

WordPress Plugin ElementsKit Elementor Addons and Templates Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress plugin ElementsKit Elementor Addon...

6.4CVSS5.2AI score0.00261EPSS
SaveExploits1
CNNVD
CNNVD
•added 2026/04/09 12:00 a.m.•22 views

WordPress plugin: List category posts – Cross-site scripting vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Versions...

6.4CVSS5.6AI score0.00321EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•26 views

WordPress plugin The Plus Addons for Elementor: Cross-site scripting vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

6.4CVSS5.7AI score0.00261EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•29 views

WordPress plugin LearnPress – WordPress LMS plugin: Cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.4CVSS5.8AI score0.00349EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•29 views

WordPress Plugin: Strong Testimonials – Cross-Site Script Vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.4CVSS5.7AI score0.00261EPSS
SaveExploits0References2
CNVD
CNVD
•added 2026/04/07 12:00 a.m.•56 views

Endian Firewall remark parameter cross-site scripting vulnerability

Endian Firewall is a network security firewall system from Endian. A cross-site scripting vulnerability exists in the Endian Firewall remark parameter, which stems from improperly cleaning up the input of the remark parameter in /manage/dhcp/fixedleases/, and can be exploited by an attacker to...

6.4CVSS5.5AI score0.00237EPSS
SaveExploits0
CNVD
CNVD
•added 2026/04/07 12:00 a.m.•18 views

Endian Firewall remark parameter cross-site scripting vulnerability

Endian Firewall is a network security firewall system from Endian. A cross-site scripting vulnerability exists in the Endian Firewall remark parameter, which stems from improperly cleaning up the input of the remark parameter in /manage/dnsmasq/hosts/, and can be exploited by an attacker to injec...

6.4CVSS5.6AI score0.00237EPSS
SaveExploits0
CNNVD
CNNVD
•added 2026/04/04 12:00 a.m.•23 views

WordPress plugin ElementsKit, Elementor Addons, and templates: cross-site scripting vulnerabilities

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress plugin ElementsKit Elementor Addon...

6.4CVSS5.5AI score0.00261EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/04/02 12:00 a.m.•24 views

Endian Firewall Cross-site Scripting Vulnerability

Endian Firewall is a network security firewall system from Endian. A cross-site scripting vulnerability exists in the Endian Firewall name parameter, which stems from improper cleanup of the name parameter input in /manage/qos/classes/, and can be exploited by an attacker to inject malicious...

6.4CVSS5.5AI score0.00237EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/04/01 12:00 a.m.•27 views

CI4MS Cross-Site Scripting Vulnerabilities

CI4MS is an open-source blog page management tool developed by Ci4MS. Versions of CI4MS prior to 0.31.0.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from improper cleanup of user inputs when creating or editing pages within the page management functionality, which...

9.1CVSS5.6AI score0.00394EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/03/21 12:00 a.m.•23 views

WordPress plugin “Show Posts List” has cross-site scripting vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.4CVSS5.8AI score0.00424EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2026/02/27 12:00 a.m.•27 views

WordPress plugin Xpro Addons — 140+ widgets for Elementor Cross-site scripting vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

6.4CVSS5.7AI score0.00224EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/02/25 12:00 a.m.•30 views

WordPress plugin SecureCopy Content Protection and Content Locking – Cross-site scripting vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

6.4CVSS5.7AI score0.00205EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/02/11 12:00 a.m.•25 views

WordPress plugin HTML Tag Shortcodes Cross-site scripting vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. WordPress...

6.4CVSS5.5AI score0.00285EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/02/11 12:00 a.m.•23 views

WordPress plugin BuddyHolis ListSearch has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.4CVSS5.5AI score0.0028EPSS
SaveExploits0References5
CNVD
CNVD
•added 2026/01/19 12:00 a.m.•37 views

WordPress LinkedIn SC plugin cross-site scripting vulnerability

WordPress LinkedIn SC plugin is a plugin for WordPress websites. The WordPress LinkedIn SC plugin suffers from a cross-site scripting vulnerability that stems from insufficient input cleanup and output escaping of the linkedinscdateformat, linkedinscapikey, and linkedinscsecretkey parameters, whi...

4.4CVSS6.3AI score0.00224EPSS
SaveExploits0References1
CNVD
CNVD
•added 2026/01/19 12:00 a.m.•20 views

WordPress Testimonials Creator plugin cross-site scripting vulnerability

WordPress Testimonials Creator plugin is a tool for creating and displaying customer testimonials that allows users to build flexible testimonial displays with a testimonial builder, ratings submission form, and a variety of design layouts with highly customizable styling support. A cross-site...

4.4CVSS6AI score0.00231EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/14 12:00 a.m.•28 views

WordPress Plugin Name Directory Cross-Site Script Vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

7.2CVSS5.5AI score0.0036EPSS
SaveExploits0References4
Rows per page
Query Builder