Lucene search
+L

1423 matches found

Vulnrichment
Vulnrichment
added 2024/03/19 2:45 p.m.12 views

CVE-2024-29123 WordPress Link Library plugin <= 7.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yannick Lefebvre Link Library allows Reflected XSS.This issue affects Link Library: from n/a through 7.6...

7.1CVSS8.6AI score0.00422EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/19 2:45 p.m.64 views

CVE-2024-29123

CVE-2024-29123: Reflected XSS in Yannick Lefebvre Link Library (WordPress plugin) due to improper input neutralization during page generation. Affected: Link Library plugin for WordPress, versions up to 7.6. Outcome per sources: the vulnerability exists and has a patch available; risk details and...

7.1CVSS8.6AI score0.00422EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/03/19 2:45 p.m.27 views

CVE-2024-29123 WordPress Link Library plugin <= 7.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yannick Lefebvre Link Library allows Reflected XSS.This issue affects Link Library: from n/a through 7.6...

7.1CVSS7.1AI score0.00422EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/19 12:0 a.m.5 views

WordPress Plugin Link Library Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

7.1CVSS5.8AI score0.00422EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/03/19 12:0 a.m.8 views

PT-2024-22744 · Unknown · Link Library

Name of the Vulnerable Software and Affected Versions: Link Library versions n/a through 7.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can inject...

7.1CVSS9AI score0.00422EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2024/03/16 12:0 a.m.13 views

WordPress Link Library Plugin <= 7.6 is vulnerable to Cross Site Scripting (XSS)

Software Link Library Type Plugin Vulnerable versions = 7.6 Fixed in 7.6.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29123 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5c122d7aac5b Credits stealthcopter Required privilege...

7.1CVSS6.5AI score0.00422EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/15 12:0 a.m.8 views

The vulnerability of the SanDisk PrivateAccess data storage and protection software for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the SanDisk PrivateAccess data storage and protection software for Windows operating systems is related to an uncontrolled search path during the loading of DLL libraries. Exploiting this vulnerability allows a perpetrator to execute arbitrary code...

7.9CVSS7.6AI score0.00186EPSS
SaveExploits0References2Affected Software1
WPVulnDB
WPVulnDB
added 2024/03/14 12:0 a.m.9 views

Link Library < 7.6.7 - Reflected Cross-Site Scripting

Description The Link Library plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the searchll parameter in all versions up to, and including, 7.6.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

6.1CVSS6.5AI score0.00409EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/03/14 12:0 a.m.19 views

WordPress Link Library Plugin <= 7.6.6 is vulnerable to Cross Site Scripting (XSS)

Software Link Library Type Plugin Vulnerable versions = 7.6.6 Fixed in 7.6.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2325 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6ac3bb374efb Credits Krzysztof Zając...

6.1CVSS5.6AI score0.00409EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2024/03/06 12:0 a.m.6 views

AppSamvid Security Vulnerability

AppSamvid is a free application whitelisting software from Cert-In open source. A security vulnerability exists in AppSamvid 2.0.1 and earlier versions, which originated from a vulnerability that allows an attacker with local administrative privileges to place a malicious DLL file on the target...

6.3CVSS7AI score0.00175EPSS
SaveExploits0References2
OSV
OSV
added 2024/02/29 6:15 p.m.5 views

CVE-2023-6132

The vulnerability, if exploited, could allow a malicious entity with access to the file system to achieve arbitrary code execution and privilege escalation by tricking AVEVA Edge to load an unsafe DLL...

7.8CVSS6.2AI score0.00193EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/02/29 12:0 a.m.6 views

Delta Electronics CNCSoft Code Issue Vulnerability

Delta Electronics CNCSoft is a CNC machine simulation system software from Delta Electronics, Taiwan, China. The software provides high-performance motion control, rich human-machine interface functions, user-friendly operation, high stability to meet the needs of high-speed cutting, and good...

7.8CVSS6.9AI score0.0039EPSS
SaveExploits0References2
OSV
OSV
added 2024/02/22 5:15 a.m.5 views

CVE-2024-23134

A maliciously crafted IGS file in tbb.dll when parsed through Autodesk AutoCAD can be used in user-after-free vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

7.8CVSS6.2AI score0.00488EPSS
SaveExploits0References3
OSV
OSV
added 2024/02/20 4:15 a.m.9 views

CVE-2024-1559

The Link Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'llreciprocal' parameter in all versions up to, and including, 7.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS5.9AI score0.00415EPSS
SaveExploits0References2
NVD
NVD
added 2024/02/20 4:15 a.m.30 views

CVE-2024-1559

The Link Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'llreciprocal' parameter in all versions up to, and including, 7.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.5CVSS5.9AI score0.00415EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/02/20 3:20 a.m.36 views

CVE-2024-1559 Link Library <= 7.6 - Unauthenticated Stored Cross-Site Scripting

The Link Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'llreciprocal' parameter in all versions up to, and including, 7.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.5CVSS6AI score0.00415EPSS
SaveExploits0References2
CVE
CVE
added 2024/02/20 3:20 a.m.66 views

CVE-2024-1559

CVE-2024-1559 : The Link Library WordPress plugin is vulnerable to unauthenticated Stored XSS via the ‘ll_reciprocal’ parameter in all versions up to 7.6. Root cause: insufficient input sanitization and output escaping. Impact: attackers can inject arbitrary scripts that run when users view injec...

6.5CVSS6AI score0.00415EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/02/20 12:0 a.m.13 views

WordPress Link Library Plugin <= 7.6 is vulnerable to Cross Site Scripting (XSS)

Software Link Library Type Plugin Vulnerable versions = 7.6 Fixed in 7.6.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1559 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID da5a199a7b9e Credits Krzysztof Zając Require...

6.5CVSS5.6AI score0.00415EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2024/02/20 12:0 a.m.7 views

WordPress Plugin Link Library Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

6.5CVSS8.1AI score0.00415EPSS
SaveExploits0References3
WPVulnDB
WPVulnDB
added 2024/02/19 12:0 a.m.22 views

Link Library < 7.6.1 - Unauthenticated Stored Cross-Site Scripting

Description The Link Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'llreciprocal' parameter in all versions up to, and including, 7.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

6.5CVSS6AI score0.00415EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder