Lucene search
+L

72 matches found

CNNVD
CNNVD
added 2023/08/10 12:00 a.m.26 views

WordPress plugin Leyka cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6AI score0.0039EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/08/07 12:00 a.m.19 views

WordPress Leyka Plugin <= 3.30.2 is vulnerable to Cross Site Scripting (XSS)

Software Leyka Type Plugin Vulnerable versions = 3.30.2 Fixed in 3.30.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-39314 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 06bb9ec2d315 Credits Phd Required privilege Unauthenticated...

7.1CVSS6.5AI score0.0039EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/06/21 1:15 p.m.4 views

CVE-2023-27450

Unauth. Stored Cross-Site Scripting XSS vulnerability in Teplitsa of social technologies Leyka plugin = 3.29.2 versions...

6.1CVSS7.3AI score0.00382EPSS
SaveExploits0References1
NVD
NVD
added 2023/06/21 1:15 p.m.20 views

CVE-2023-27450

Unauth. Stored Cross-Site Scripting XSS vulnerability in Teplitsa of social technologies Leyka plugin = 3.29.2 versions...

7.1CVSS6.1AI score0.00382EPSS
SaveExploits0References1
CVE
CVE
added 2023/06/21 12:49 p.m.46 views

CVE-2023-27450

CVE-2023-27450 is an unauthenticated stored XSS in the WordPress Leyka plugin (

7.1CVSS5.8AI score0.00382EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/06/21 12:49 p.m.15 views

CVE-2023-27450 WordPress Leyka Plugin <= 3.29.2 is vulnerable to Cross Site Scripting (XSS)

Unauth. Stored Cross-Site Scripting XSS vulnerability in Teplitsa of social technologies Leyka plugin = 3.29.2 versions...

7.1CVSS5.6AI score0.00382EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/06/21 12:49 p.m.24 views

CVE-2023-27450 WordPress Leyka Plugin <= 3.29.2 is vulnerable to Cross Site Scripting (XSS)

Unauth. Stored Cross-Site Scripting XSS vulnerability in Teplitsa of social technologies Leyka plugin = 3.29.2 versions...

7.1CVSS6.2AI score0.00382EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/06/21 12:00 a.m.7 views

PT-2023-21138 · Teplitsa Of Social Technologies · Leyka Plugin

Name of the Vulnerable Software and Affected Versions: Teplitsa of social technologies Leyka plugin versions = 3.29.2 Description: The issue is related to an Unauth. Stored Cross-Site Scripting XSS vulnerability. No information is provided about the estimated number of potentially affected device...

7.1CVSS6AI score0.00382EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2023/05/22 12:00 a.m.15 views

WordPress Leyka Plugin <= 3.30.1 is vulnerable to Cross Site Scripting (XSS)

Software Leyka Type Plugin Vulnerable versions = 3.30.1 Fixed in 3.30.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-33325 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6d835c492683 Credits thiennv Required privileg...

7.1CVSS5.6AI score0.00379EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/05/22 12:00 a.m.13 views

WordPress Leyka Plugin <= 3.30.2 is vulnerable to Privilege Escalation

Software Leyka Type Plugin Vulnerable versions = 3.30.2 Fixed in 3.30.3 OWASP Top 10 A5: Broken Access Control Classification Privilege Escalation CVE CVE-2023-33327 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 83c2b21f0549 Credits Nguyen Anh Tien Required privilege...

8.8CVSS6.5AI score0.00521EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/03/03 12:00 a.m.16 views

WordPress Leyka Plugin <= 3.29.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Leyka Type Plugin Vulnerable versions = 3.29.2 Fixed in 3.30 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-27442 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID dc5061a06f06 Credits yuyudhn Required privilege...

8.8CVSS6.7AI score0.00294EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/03/03 12:00 a.m.13 views

WordPress Leyka Plugin <= 3.29.2 is vulnerable to Cross Site Scripting (XSS)

Software Leyka Type Plugin Vulnerable versions = 3.29.2 Fixed in 3.30 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-27450 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 640e811c9233 Credits yuyudhn Required privilege...

7.1CVSS5.9AI score0.00382EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder