Lucene search
K

18 matches found

CNNVD
CNNVD
added 2025/12/21 12:0 a.m.1 views

WordPress plugin ELEX WordPress HelpDesk & Customer Ticketing System 跨站脚本漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. WordPress is a blogging platform developed using the PHP language, which provides the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin is an...

7.2CVSS5.7AI score0.00142EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/11/11 12:0 a.m.1 views

WordPress plugin Skip to Timestamp 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.9AI score0.00031EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/11/11 12:0 a.m.1 views

WordPress plugin WP Count Down Timer 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin ... A cross-site...

6.4CVSS5.9AI score0.00031EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/09/25 12:0 a.m.1 views

Vulnerability-Lookup 跨站脚本漏洞

Vulnerability-Lookup is an open source Vulnerability-Lookup platform for managing disclosure of vulnerabilities. A cross-site scripting vulnerability exists in Vulnerability-Lookup version 2.16.0 that stems from insufficient cleanup of user input and could lead to a cross-site scripting attack...

6.4CVSS5.7AI score0.00035EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/08/22 12:0 a.m.1 views

WordPress plugin WP Talroo 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.1CVSS5.9AI score0.00108EPSS
Exploits1References3
CNNVD
CNNVD
added 2025/08/12 12:0 a.m.0 views

Siemens多款产品 代码问题漏洞

Siemens SIMATIC STEP and others are products of Siemens, a German company. siemens SIMATIC STEP is a comprehensive engineering tool for configuring and programming SIMATIC controllers. siemens SIMATIC PCS neo is a distributed control system. siemens SIMATIC STEP 7 is a PLC program simulation...

8.6CVSS7AI score0.00083EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/06/19 12:0 a.m.1 views

WordPress plugin Football Pool 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.5CVSS5.7AI score0.00162EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/04/16 12:0 a.m.2 views

Symfonia Ready_ SQL注入漏洞

Symfonia Ready is an operating system from Symfonia that builds programs for companies to use off-the-shelf modules and business applications. Symfonia Ready has an SQL injection vulnerability that stems from improper input cleanup in the Invoices module file search function, which could lead to ...

9.4CVSS7.6AI score0.022EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/04/14 12:0 a.m.1 views

SicommNet BASEC 安全漏洞

SicommNet BASEC is a proxy solution from SicommNet, Inc. A security vulnerability exists in SicommNet BASEC that stems from improper input cleanup and could lead to a reflective cross-site scripting attack...

8.7CVSS5.9AI score0.00319EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/03/07 12:0 a.m.1 views

Backdrop CMS 跨站脚本漏洞

Backdrop CMS is a content management system CMS from Backdrop CMS open source. A cross-site scripting vulnerability exists in Backdrop CMS versions prior to 1.x-1.1.1, which stems from insufficient input cleanup and could lead to cross-site scripting attacks...

6.4CVSS6AI score0.00235EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/02/11 12:0 a.m.1 views

SolarWinds Platform 代码问题漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from SolarWinds USA. A code issue vulnerability exists in versions of SolarWinds Platform prior to 2025.1 that stems from a failure to apply proper input cleanup, which could lead to the possibility of...

9.8CVSS6.7AI score0.0044EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/11/19 12:0 a.m.2 views

ESLint Rewrite 安全漏洞

ESLint Rewrite is an ESLint open source application. A security vulnerability exists in ESLint Rewrite versions prior to 0.2.3, which stems from improper input cleanup and is susceptible to regular expression denial of service attacks...

7.5CVSS6.4AI score0.00213EPSS
Exploits0References2
CNVD
CNVD
added 2024/06/06 12:0 a.m.4 views

WordPress ElementsReady Addons for Elementor Cross-Site Scripting Attack Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language, which supports personal blog sites on PHP and MySQL servers.ElementsReady Addons for Elementor is a plugin for the Elementor widget library used in... A cross-site scripting attack vulnerability exists ...

6.4CVSS6.1AI score0.00233EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/05/14 12:0 a.m.1 views

WordPress plugin Beaver Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.4CVSS6.2AI score0.00206EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/04/09 12:0 a.m.1 views

WordPress Plugin Elementor Addons by Livemesh 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in WordPress Plugin...

6.4CVSS7.7AI score0.00283EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/02/29 12:0 a.m.1 views

Field Logic DataCube4 Security Vulnerability

Field Logic DataCube4 is a small measurement terminal system from Field Logic. A security vulnerability exists in Field Logic DataCube4 version 1.0 that stems from improper input cleanup and is affected by the Reflected Cross Site Scripting XSS vulnerability...

6.1CVSS6.1AI score0.00108EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/02/05 12:0 a.m.3 views

WordPress plugin SiteOrigin Widgets Bundle security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on servers running PHP and MySQL. A security vulnerability exists in WordPres...

6.4CVSS6.3AI score0.00227EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/08/14 12:0 a.m.1 views

SVG Loader Cross-Site Scripting Vulnerability

SVG Loader is a simple JS library that uses XHR to fetch SVG and injects SVG code into the location of the tag. A cross-site scripting vulnerability exists in SVG Loader version 1.6.8 and prior versions, which stems from insufficient input cleanup logic and can be easily bypassed...

7.1CVSS6.4AI score0.00159EPSS
Exploits0References5
Rows per page
Query Builder