Lucene search
+L

6646 matches found

CNNVD
CNNVD
added 2025/09/22 12:00 a.m.7 views

WordPress plugin Open User Map 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.8AI score0.00306EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.10 views

PT-2025-38802

Name of the Vulnerable Software and Affected Versions icopydoc Maps for WP versions through 1.2.5 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, potentially leading to Cross-site Scripting XSS. This allows an attacker to inject...

5.9CVSS6.1AI score0.00327EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/09/22 12:00 a.m.8 views

WordPress plugin Safety Exit 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the capability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS5.6AI score0.00225EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.8 views

PT-2025-38880

Name of the Vulnerable Software and Affected Versions Nextendweb Nextend Facebook Connect versions through 3.1.19 Description The software contains a flaw due to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that maliciou...

6.5CVSS6.1AI score0.0021EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.14 views

PT-2025-39034

Name of the Vulnerable Software and Affected Versions GetResponse Forms versions through 2.6.0 Description An issue exists in GetResponse Forms related to improper neutralization of input during web page generation, leading to a Stored Cross-Site Scripting XSS condition. The issue allows for the...

6.5CVSS5.5AI score0.00204EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.17 views

PT-2025-39037

Name of the Vulnerable Software and Affected Versions Coderz Studio Custom iFrame for Elementor versions through 1.0.13 Description An issue exists in Coderz Studio Custom iFrame for Elementor that allows for DOM-Based Cross-site Scripting XSS. The issue is due to improper neutralization of input...

6.5CVSS6.2AI score0.00204EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.13 views

PT-2025-38909

Name of the Vulnerable Software and Affected Versions bestweblayout Portfolio versions through 2.58 Description The software contains a flaw related to improper input handling during web page generation, leading to a DOM-Based Cross-Site Scripting XSS issue. This allows for potential malicious co...

5.9CVSS6.4AI score0.00225EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.12 views

PT-2025-38936

Name of the Vulnerable Software and Affected Versions Will.I.am Simple Restaurant Menu versions through 1.2 Description The Simple Restaurant Menu software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means...

5.9CVSS6.2AI score0.00225EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.10 views

PT-2025-39006

Name of the Vulnerable Software and Affected Versions DELUCKS SEO versions through 2.7.0 Description A flaw exists in DELUCKS SEO that allows for Stored Cross-site Scripting XSS. This occurs due to improper neutralization of input during web page generation. An attacker could potentially inject...

6.5CVSS6.1AI score0.00268EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.6 views

PT-2025-38950

Name of the Vulnerable Software and Affected Versions eZee Technosys eZee Online Hotel Booking Engine versions through 1.0.0 Description The eZee Online Hotel Booking Engine contains a flaw due to improper neutralization of input during web page generation, leading to a Cross-site Scripting XSS...

5.9CVSS5.4AI score0.00225EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.7 views

PT-2025-38954

Name of the Vulnerable Software and Affected Versions tmontg1 Form Generator for WordPress versions through 1.5.2 Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, which can lead to Cross-site Scripting XSS. This specific instance...

5.9CVSS5.9AI score0.00225EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/09/22 12:00 a.m.8 views

WordPress plugin Mail Subscribe List 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.6AI score0.00276EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.7 views

PT-2025-38892

Name of the Vulnerable Software and Affected Versions Podlove Subscribe button versions through 1.3.11 Description The Podlove Subscribe button software contains a flaw related to improper input handling during web page generation, specifically a Stored Cross-site Scripting issue. This allows for...

6.5CVSS6.4AI score0.0021EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.8 views

PT-2025-38830

Name of the Vulnerable Software and Affected Versions Safety Exit versions through 1.8.0 Description A flaw exists in Safety Exit that allows for Stored Cross-site Scripting XSS. This issue is due to improper neutralization of input during web page generation. Successful exploitation could allow ...

5.9CVSS5.8AI score0.00225EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.9 views

PT-2025-38798

Name of the Vulnerable Software and Affected Versions e-plugins Directory Pro versions through 2.5.5 Description The software contains a flaw related to improper input handling during web page generation, leading to a DOM-Based Cross-site Scripting issue. This allows for potential malicious code...

6.5CVSS7AI score0.00268EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.13 views

PT-2025-38803

Name of the Vulnerable Software and Affected Versions 100plugins Open User Map versions through 1.4.14 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a DOM-Based Cross-site Scripting issue. This allows for the execution of...

6.5CVSS6.4AI score0.00306EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.7 views

PT-2025-38877

Name of the Vulnerable Software and Affected Versions Designil PDPA Thailand versions through 2.0 Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, potentially leading to Cross-site Scripting XSS. This specific instance allows for...

6.5CVSS6AI score0.00204EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.12 views

PT-2025-38788

Name of the Vulnerable Software and Affected Versions themewant Easy Hotel Booking versions through 1.6.9 Description An issue exists in themewant Easy Hotel Booking that allows for DOM-Based Cross-site Scripting XSS. This occurs due to improper neutralization of input during web page generation...

6.5CVSS6.3AI score0.00217EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/09/22 12:00 a.m.9 views

WordPress plugin WP Mailto Links 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...

5.9CVSS5.8AI score0.00296EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/22 12:00 a.m.8 views

WordPress plugin Simple JWT Login 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...

6.5CVSS5.8AI score0.0021EPSS
SaveExploits0References1
Rows per page
Query Builder