Lucene search
+L

10 matches found

NVD
NVD
•added 2021/09/10 2:15 p.m.•31 views

CVE-2021-38359

The WordPress InviteBox Plugin for viral Refer-a-Friend Promotions WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the message parameter found in the /admin/admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.4.1...

6.1CVSS0.00819EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2021/09/10 2:15 p.m.•16 views

CVE-2021-38359

The WordPress InviteBox Plugin for viral Refer-a-Friend Promotions WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the message parameter found in the /admin/admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.4.1...

6.1CVSS5.8AI score0.00819EPSS
SaveExploits0References2
Prion
Prion
•added 2021/09/10 2:15 p.m.•38 views

Cross site scripting

The WordPress InviteBox Plugin for viral Refer-a-Friend Promotions WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the message parameter found in the /admin/admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.4.1...

4.3CVSS6.1AI score0.00819EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/09/10 1:34 p.m.•44 views

CVE-2021-38359 WordPress InviteBox Plugin <= 1.4.1 Reflected Cross-Site Scripting

The WordPress InviteBox Plugin for viral Refer-a-Friend Promotions WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the message parameter found in the /admin/admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.4.1...

6.1CVSS6.2AI score0.00819EPSS
SaveExploits0References2
Mend
Mend
•added 2021/09/10 1:34 p.m.•5 views

CVE-2021-38359

The WordPress InviteBox Plugin for viral Refer-a-Friend Promotions WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the message parameter found in the /admin/admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.4.1...

6.1CVSS0.00819EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2021/09/10 1:34 p.m.•8 views

CVE-2021-38359 WordPress InviteBox Plugin <= 1.4.1 Reflected Cross-Site Scripting

The WordPress InviteBox Plugin for viral Refer-a-Friend Promotions WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the message parameter found in the /admin/admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.4.1...

6.1CVSS6.1AI score0.00819EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/10 12:00 a.m.•7 views

CVE-2021-38359: Improper Neutralization of Input During Web Page Generation

The WordPress InviteBox Plugin for viral Refer-a-Friend Promotions WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the message parameter found in the /admin/admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.4.1...

6.1CVSS5.7AI score0.00819EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/09/10 12:00 a.m.•17 views

WordPress plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists i...

6.1CVSS6.1AI score0.00819EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/09/10 12:00 a.m.•7 views

PT-2021-22079

Name of the Vulnerable Software and Affected Versions WordPress InviteBox Plugin versions up to and including 1.4.1 Description The WordPress InviteBox Plugin is affected by a Reflected Cross-Site Scripting issue. This is due to the message parameter in the /admin/admin.php file, which allows...

6.1CVSS0.00819EPSS
SaveExploits0References5
WPVulnDB
WPVulnDB
•added 2021/09/09 12:00 a.m.•26 views

WordPress InviteBox Plugin <= 1.4.1 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the message parameter found in the /admin/admin.php file which allows attackers to inject arbitrary web scripts...

6.1CVSS5AI score0.00819EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder