Lucene search
+L

6651 matches found

CNNVD
CNNVD
added 2024/12/12 12:00 a.m.11 views

WordPress plugin Website Toolbox Community 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

6.1CVSS7.6AI score0.00397EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/12/12 12:00 a.m.11 views

WordPress plugin BP Email Assign Templates 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS7.9AI score0.00406EPSS
SaveExploits0References2
OSV
OSV
added 2024/12/09 1:15 p.m.9 views

CVE-2024-54253

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xpro Xpro Elementor Addons allows Stored XSS.This issue affects Xpro Elementor Addons: from n/a through 1.4.6.1...

5.4CVSS7.3AI score0.00341EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/12/09 12:00 a.m.15 views

PT-2024-35905 · Lenxel · Lenxel Core For Lenxel(Lnx) Lms

Name of the Vulnerable Software and Affected Versions: Lenxel Core for LenxelLNX LMS versions 1.2.5 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can injec...

6.5CVSS6AI score0.00316EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/12/09 12:00 a.m.11 views

WordPress plugin ARForms Form Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS8.4AI score0.00324EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/09 12:00 a.m.11 views

WordPress plugin LadiApp 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

7.1CVSS8.1AI score0.00463EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/09 12:00 a.m.15 views

PT-2024-36126 · Unknown · Abcbiz Addons/Templates For Elementor

Name of the Vulnerable Software and Affected Versions: ABCBiz Addons and Templates for Elementor versions 2.0.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Stored Cross-site Scripting XSS vulnerability. This...

6.5CVSS5.3AI score0.00334EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/12/09 12:00 a.m.33 views

WordPress plugin Easy Appointments 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS8.2AI score0.00341EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/09 12:00 a.m.13 views

PT-2024-36097 · Thehp · Thehp Aio Contact

Name of the Vulnerable Software and Affected Versions: Thehp AIO Contact versions prior to 2.8.1 Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting. Recommendations: For versions prior to 2.8.1, update to a...

7.1CVSS6.8AI score0.00354EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/12/09 12:00 a.m.11 views

PT-2024-36108 · WordPress · Wprealizer Unlock Addons For Elementor

Name of the Vulnerable Software and Affected Versions: WPRealizer Unlock Addons for Elementor versions 1.0.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows DOM-Based XSS. This is a...

6.5CVSS6.6AI score0.00299EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/12/09 12:00 a.m.12 views

Synology Router Manager 安全漏洞

Synology Router Manager SRM is a software used to configure and manage Synology routers from China-based Synology. A security vulnerability exists in Synology Router Manager versions prior to 1.3.1-9346-10, which stems from improper input neutralization in the router's port forwarding feature, an...

5.9CVSS5.6AI score0.0026EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/09 12:00 a.m.9 views

WordPress plugin PostX 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

6.5CVSS7.8AI score0.0034EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/07 12:00 a.m.10 views

IBM AIX 操作系统命令注入漏洞

IBM AIX is an open standards-based UNIX operating system developed by International Business Machines IBM for the IBM Power architecture. An operating system command injection vulnerability exists in IBM AIX versions 7.2 and 7.3, which stems from improper neutralization of user input. An attacker...

7.8CVSS8AI score0.00231EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/12/06 12:00 a.m.9 views

WordPress plugin Pie Register Premium 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS7.6AI score0.00275EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/06 12:00 a.m.9 views

WordPress plugin Z-Downloads 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site...

5.9CVSS7.6AI score0.00258EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/06 12:00 a.m.9 views

WordPress plugin Beaver Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

6.5CVSS7.7AI score0.00309EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/06 12:00 a.m.20 views

PT-2024-35916 · Unknown · Futurio Extra

Name of the Vulnerable Software and Affected Versions: Futurio Extra versions prior to 2.0.14 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This enables attackers to inject malicious scripts into...

6.5CVSS6.5AI score0.00309EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/12/06 12:00 a.m.12 views

WordPress plugin WP GeoNames 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

7.1CVSS7.6AI score0.00275EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/06 12:00 a.m.9 views

WordPress plugin Captivate Sync 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.6AI score0.00243EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/06 12:00 a.m.15 views

WordPress plugin Magical Addons For Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS7.6AI score0.00254EPSS
SaveExploits0References1
Rows per page
Query Builder