Lucene search
+L

42 matches found

NVD
NVD
•added 2026/09/30 3:22 p.m.•6 views

CVE-2026-62084

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeff Starr User Submitted Posts allows Stored XSS. This issue affects User Submitted Posts: from n/a through 20260810...

6.5CVSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/30 2:03 p.m.•2 views

EUVD-2026-89958

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeff Starr User Submitted Posts allows Stored XSS. This issue affects User Submitted Posts: from n/a through 20260810...

6.5CVSS5.9AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/30 2:03 p.m.•5 views

CVE-2026-62084 WordPress User Submitted Posts plugin <= 20260810 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeff Starr User Submitted Posts allows Stored XSS. This issue affects User Submitted Posts: from n/a through 20260810...

6.5CVSS
SaveExploits0References1
CVE
CVE
•added 2026/09/30 2:03 p.m.•3 views

CVE-2026-62084

The Jeff Starr User Submitted Posts WordPress plugin is vulnerable to a Stored Cross-Site Scripting (XSS) flaw in versions up to 20260810 . The root cause is the improper neutralization of input during web page generation . This vulnerability allows an attacker to inject malicious scripts that ar...

6.5CVSS5.9AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/23 12:00 a.m.•2 views

CVE-2026-3075: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Jeff Starr Simple Ajax Chat simple-ajax-chat allows Retrieve Embedded Sensitive Data.This issue affects Simple Ajax Chat: from n/a through = 20251121...

5.3CVSS5.8AI score0.00343EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:28 a.m.•14 views

CVE-2023-49743

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeff Starr Dashboard Widgets Suite allows Stored XSS.This issue affects Dashboard Widgets Suite: from n/a through 3.4.1...

5.9CVSS6.5AI score0.00394EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/25 1:23 p.m.•15 views

CVE-2025-68509

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Jeff Starr User Submitted Posts user-submitted-posts allows Phishing.This issue affects User Submitted Posts: from n/a through = 20251121...

4.7CVSS6.9AI score0.00521EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/24 3:30 p.m.•21 views

EUVD-2025-205206

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Jeff Starr User Submitted Posts user-submitted-posts allows Phishing.This issue affects User Submitted Posts: from n/a through = 20251121...

6.1CVSS6.4AI score0.00521EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/24 1:16 p.m.•13 views

CVE-2025-68509

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Jeff Starr User Submitted Posts user-submitted-posts allows Phishing.This issue affects User Submitted Posts: from n/a through = 20251121...

4.7CVSS0.00521EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/24 12:00 a.m.•17 views

PT-2025-53081

Name of the Vulnerable Software and Affected Versions Jeff Starr User Submitted Posts versions prior to and including 20251121 Description The software contains an Open Redirect issue, allowing for potential phishing attacks. This occurs due to a redirection to an untrusted site. Recommendations...

6.1CVSS6.6AI score0.00521EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•2 views

CVE-2025-68509: URL Redirection to Untrusted Site

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Jeff Starr User Submitted Posts user-submitted-posts allows Phishing.This issue affects User Submitted Posts: from n/a through = 20251121...

4.7CVSS5.8AI score0.00521EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/22 12:34 p.m.•21 views

CVE-2025-66081

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeff Starr Head Meta Data head-meta-data allows Stored XSS.This issue affects Head Meta Data: from n/a through = 20250327...

5.9CVSS5.9AI score0.00204EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/21 12:29 p.m.•15 views

EUVD-2025-198466

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeff Starr Head Meta Data head-meta-data allows Stored XSS.This issue affects Head Meta Data: from n/a through = 20250327...

5.4CVSS5.5AI score0.00204EPSS
SaveExploits0References2
CVE
CVE
•added 2025/11/21 12:29 p.m.•28 views

CVE-2025-66081

CVE-2025-66081 affects the WordPress Head Meta Data plugin. The vulnerability is a stored XSS caused by improper input neutralization during web page generation, affecting versions up to and including 20250327. The CVSSv3.1 base score is 5.4 (Medium). Connected sources corroborate the stored XSS ...

5.9CVSS5.6AI score0.00204EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2025-13824

Malicious code in bioql PyPI...

6.5CVSS7.3AI score0.00251EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•9 views

EUVD-2025-25515

Malicious code in bioql PyPI...

4.3CVSS6.5AI score0.00128EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2023-30314

Malicious code in bioql PyPI...

5.9CVSS6.2AI score0.00369EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/24 12:34 p.m.•13 views

CVE-2025-57892

Cross-Site Request Forgery CSRF vulnerability in Jeff Starr Simple Statistics for Feeds simple-feed-stats allows Cross Site Request Forgery.This issue affects Simple Statistics for Feeds: from n/a through = 20250322...

4.3CVSS5.9AI score0.00128EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/22 12:15 p.m.•9 views

CVE-2025-57892

Cross-Site Request Forgery CSRF vulnerability in Jeff Starr Simple Statistics for Feeds simple-feed-stats allows Cross Site Request Forgery.This issue affects Simple Statistics for Feeds: from n/a through = 20250322...

4.3CVSS0.00128EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/22 11:59 a.m.•20 views

CVE-2025-57892

CVE-2025-57892 is a CSRF vulnerability in WordPress plugin Simple Statistics for Feeds (versions up to 20250322). The CVE details show a CSRF risk without published in-the-wild exploits in the provided documents, with a CVSS v3.1 base score of 4.3 (Medium) and impact limited to integrity/availabi...

4.3CVSS5.9AI score0.00128EPSS
SaveExploits0References1
Rows per page
Query Builder