Lucene search
K

15 matches found

RedhatCVE
RedhatCVE
added 2025/10/04 11:53 a.m.3 views

CVE-2025-9876

The Ird Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'irdslider' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5AI score0.00035EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/10/03 10:33 p.m.2 views

WordPress Ird Slider plugin <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Gilang - DJ in WordPress Plugin Ird Slider versions = 1.0.2...

6.4CVSS5.8AI score0.00035EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2025/10/03 12:15 p.m.2 views

CVE-2025-9876

The Ird Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'irdslider' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00035EPSS
Exploits0References2
CVE
CVE
added 2025/10/03 11:17 a.m.7 views

CVE-2025-9876

CVE-2025-9876 affects the WordPress Ird Slider plugin (versions ≤ 1.0.2). It is a stored XSS due to insufficient input sanitization and output escaping on the irdslider shortcode attributes, exploitable by authenticated attackers with contributor-level access or higher. The impact is arbitrary sc...

6.4CVSS4.7AI score0.00035EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 11:17 a.m.1 views

EUVD-2025-32277

The Ird Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'irdslider' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS4.6AI score0.00035EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/10/03 11:17 a.m.1 views

CVE-2025-9876 Ird Slider <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Ird Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'irdslider' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS4.7AI score0.00035EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/10/03 12:0 a.m.1 views

PT-2025-40503

Name of the Vulnerable Software and Affected Versions Ird Slider versions prior to 1.0.3 Description The Ird Slider plugin for WordPress is susceptible to Stored Cross-Site Scripting through the plugin’s irdslider shortcode. Insufficient input sanitization and output escaping on user-supplied...

6.4CVSS5.2AI score0.00035EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/10/03 12:0 a.m.1 views

WordPress plugin Ird Slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

6.4CVSS5.9AI score0.00035EPSS
Exploits0References2
Exploit DB
Exploit DB
added 2024/05/04 12:0 a.m.343 views

Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 - Authentication Bypass

Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 Authentication Bypass Vendor: Elber S.r.l. Product web page: https://www.elber.it Affected version: 1.999 Revision 1243 1.317 Revision 602 1.220 Revision 1250 1.220 Revision 12481249 1.220 Revision 597 1.217 Revision 1242 1.214 Revision 1023 1.19...

7.4AI score
Exploits0
0day.today
0day.today
added 2024/04/22 12:0 a.m.245 views

Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 Authentication Bypass Vulnerability

Elber Signum DVB-S/S2 IRD for Radio Networks version 1.999 suffers from an authentication bypass vulnerability through a direct and unauthorized access to the password management functionality. The issue allows attackers to bypass authentication by manipulating the setpwd endpoint that enables th...

7.8AI score
Exploits0
0day.today
0day.today
added 2024/04/22 12:0 a.m.255 views

Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 Insecure Direct Object Reference Vulnerability

Elber Signum DVB-S/S2 IRD for Radio Networks version 1.999 suffers from an unauthenticated device configuration and client-side hidden functionality disclosure vulnerability. Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 Device Config Vendor: Elber S.r.l. Product web page: https://www.elber....

7.5AI score
Exploits0
Packet Storm
Packet Storm
added 2024/04/18 12:0 a.m.284 views

Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 Insecure Direct Object Reference

Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 Device Config Vendor: Elber S.r.l. Product web page: https://www.elber.it Affected version: 1.999 Revision 1243 1.317 Revision 602 1.220 Revision 1250 1.220 Revision 12481249 1.220 Revision 597 1.217 Revision 1242 1.214 Revision 1023 1.193 Revisi...

7.4AI score
Exploits0
Openbugbounty
Openbugbounty
added 2020/10/20 12:2 p.m.8 views

ird.gov.br Improper Access Control vulnerability OBB-1428838

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/02/21 8:41 a.m.14 views

aoos.mpl.ird.fr XSS vulnerability

Vulnerable URL: http://aoos.mpl.ird.fr/aoos/list.php?criterion1=zone=amz2=parameter=sst"3=spatialres"xxx=9km"xxx Details: Description| Value ---|--- Patched:| Yes, at 25.02.2017 Latest check for patch:| 25.02.2017 09:48 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

6.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/02/03 8:31 a.m.13 views

ird.govt.nz XSS vulnerability

Vulnerable URL: https://ird.govt.nz/images/flash/mediaplayer-viral/player.swf?debug=promptopenbugbounty Details: Description| Value ---|--- Patched:| Yes, at 28.11.2017 Latest check for patch:| 28.11.2017 07:04 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 347...

6.4AI score
Exploits0
Rows per page
Query Builder