Lucene search
+L

6650 matches found

CNNVD
CNNVD
added 2024/12/13 12:00 a.m.9 views

WordPress plugin Shiptimize for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

7.1CVSS7.7AI score0.00418EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/13 12:00 a.m.9 views

WordPress plugin ImageRecycle pdf & image compression 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin ImageRecycle pdf & image...

7.1CVSS7.8AI score0.00426EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/13 12:00 a.m.8 views

PT-2024-36212 · Metup S.R.L. · Clevernode Related Content

Name of the Vulnerable Software and Affected Versions: CleverNode Related Content versions 1.1.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS attacks. The vulnerabili...

7.1CVSS6AI score0.00339EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/12/13 12:00 a.m.8 views

WordPress plugin Check Pincode For Woocommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

7.1CVSS8AI score0.00339EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/13 12:00 a.m.15 views

PT-2024-36230 · Skt Themes · Skt Themes Bicycleshop

Name of the Vulnerable Software and Affected Versions: SKT Themes Bicycleshop versions 1.5 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows DOM-Based XSS. This means that an attacker could potentially inject malicious scrip...

6.5CVSS6.8AI score0.00293EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/12/13 12:00 a.m.12 views

PT-2024-36217 · Woocommerce · Check Pincode For Woocommerce

Name of the Vulnerable Software and Affected Versions: Check Pincode For Woocommerce versions 1.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS. Recommendations: For...

7.1CVSS6.8AI score0.00339EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/12/13 12:00 a.m.7 views

PT-2024-36113 · Woocommerce · Shiptimize For Woocommerce

Name of the Vulnerable Software and Affected Versions: Shiptimize for WooCommerce versions 3.1.86 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This means an attacker can...

7.1CVSS6.9AI score0.00418EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/12/13 12:00 a.m.8 views

PT-2024-36119 · Woocommerce · Blaze Online Eparcel For Woocommerce

Name of the Vulnerable Software and Affected Versions: Blaze Online eParcel for WooCommerce versions 1.3.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS...

7.1CVSS7.1AI score0.00418EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/12/13 12:00 a.m.7 views

WordPress plugin FAQs 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.5CVSS7.4AI score0.00369EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/13 12:00 a.m.8 views

WordPress plugin Advanced Blog Post Block 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.5CVSS7.8AI score0.00369EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/13 12:00 a.m.9 views

WordPress plugin Hello Event Widgets For Elementor 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

6.5CVSS7.9AI score0.00318EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/13 12:00 a.m.6 views

WordPress plugin Plain Post 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.9AI score0.00303EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/13 12:00 a.m.7 views

WordPress plugin Appsplate SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

9.3CVSS9.5AI score0.0079EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/13 12:00 a.m.9 views

WordPress plugin Role Includer 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.9AI score0.00418EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/13 12:00 a.m.10 views

WordPress plugin Persian Woocommerce SMS 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

7.1CVSS8AI score0.00418EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/13 12:00 a.m.10 views

PT-2024-36145 · Unknown · Ukrsolution Barcode Scanner With Inventory & Order Manager

Name of the Vulnerable Software and Affected Versions: UkrSolution Barcode Scanner with Inventory & Order Manager versions 1.6.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for...

7.1CVSS6.8AI score0.00418EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2024/12/12 8:00 p.m.34 views

Important: Red Hat Security Advisory: HawtIO 4.1.0 for Red Hat build of Apache Camel 4 Release and security update.

HawtIO 4.1.0 for Red Hat build of Apache Camel 4 GA Release is now available. The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products. Red Hat Product Security has rated this update ...

7.5CVSS6.9AI score0.14718EPSS
SaveExploits2References10
RedHat Linux
RedHat Linux
added 2024/12/12 8:00 p.m.10 views

express: Improper Input Handling in Express Redirects

A flaw was found in Express. This vulnerability allows untrusted code execution via passing untrusted user input to response.redirect, even if the input is sanitized...

5CVSS7.7AI score0.00486EPSS
SaveExploits0References6
Snyk
Snyk
added 2024/12/12 2:46 p.m.11 views

Prototype Pollution

Overview Affected versions of this package are vulnerable to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects. Note: This issue relates to the widely known and actively developed 'Bun' JavaScript runtime. The...

7.7CVSS6.5AI score0.00652EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/12/12 12:00 a.m.11 views

WordPress plugin Website Toolbox Community 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

6.1CVSS7.6AI score0.00397EPSS
SaveExploits0References2
Rows per page
Query Builder