Lucene search
+L

8 matches found

OSV
OSV
•added 2021/09/10 2:15 p.m.•13 views

CVE-2021-38359

The WordPress InviteBox Plugin for viral Refer-a-Friend Promotions WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the message parameter found in the /admin/admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.4.1...

6.1CVSS5.8AI score0.00819EPSS
SaveExploits0References2
NVD
NVD
•added 2021/09/10 2:15 p.m.•27 views

CVE-2021-38359

The WordPress InviteBox Plugin for viral Refer-a-Friend Promotions WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the message parameter found in the /admin/admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.4.1...

6.1CVSS0.00819EPSS
SaveExploits0References2
Prion
Prion
•added 2021/09/10 2:15 p.m.•34 views

Cross site scripting

The WordPress InviteBox Plugin for viral Refer-a-Friend Promotions WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the message parameter found in the /admin/admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.4.1...

4.3CVSS6.1AI score0.00819EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/09/10 1:34 p.m.•36 views

CVE-2021-38359 WordPress InviteBox Plugin <= 1.4.1 Reflected Cross-Site Scripting

The WordPress InviteBox Plugin for viral Refer-a-Friend Promotions WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the message parameter found in the /admin/admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.4.1...

6.1CVSS6.2AI score0.00819EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2021/09/10 1:34 p.m.•7 views

CVE-2021-38359 WordPress InviteBox Plugin <= 1.4.1 Reflected Cross-Site Scripting

The WordPress InviteBox Plugin for viral Refer-a-Friend Promotions WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the message parameter found in the /admin/admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.4.1...

6.1CVSS6.1AI score0.00819EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/10 12:00 a.m.•4 views

CVE-2021-38359: Improper Neutralization of Input During Web Page Generation

The WordPress InviteBox Plugin for viral Refer-a-Friend Promotions WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the message parameter found in the /admin/admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.4.1...

6.1CVSS5.7AI score0.00819EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/09/10 12:00 a.m.•14 views

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists i...

6.1CVSS6.1AI score0.00819EPSS
SaveExploits0References4
WPVulnDB
WPVulnDB
•added 2021/09/09 12:00 a.m.•24 views

WordPress InviteBox Plugin <= 1.4.1 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the message parameter found in the /admin/admin.php file which allows attackers to inject arbitrary web scripts...

6.1CVSS5AI score0.00819EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder