Lucene search
+L

96 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/07 12:00 a.m.•5 views

CVE-2025-25116: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in sudipto Link to URL / Post link-to-url-post allows Blind SQL Injection.This issue affects Link to URL / Post: from n/a through = 1.3...

7.6CVSS5.8AI score0.00465EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/07 12:00 a.m.•18 views

WordPress plugin Link to URL / Post SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exist...

7.6CVSS9.2AI score0.00465EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/02/03 4:12 p.m.•14 views

WordPress Link to URL / Post plugin <=1.3 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Tri Doan in WordPress Plugin Link to URL / Post versions = 1.3...

7.6CVSS8AI score0.00465EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2024/09/26 2:16 p.m.•26 views

Security Bulletin: Vulnerability in libxml2 affects IBM Integrated Analytics System [CVE-2022-23308]

Summary Redhat provided libxml2 is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE CVE-2022-23308 Vulnerability Details CVEID:CVE-2022-23308 DESCRIPTION: libxml2 is vulnerable to a denial of service, caused by a use-after-free in the ID an...

7.5CVSS7.1AI score0.0512EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2024/09/26 1:32 p.m.•31 views

Security Bulletin: Vulnerability in glibc affects IBM Integrated Analytics System [ CVE-2021-33574]

Summary Redhat provided glibc is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE CVE-2021-33574 Vulnerability Details CVEID:CVE-2021-33574 DESCRIPTION: GNU C Library aka glibc is vulnerable to a denial of service, caused by a use-after-fre...

9.8CVSS7.1AI score0.02874EPSS
SaveExploits1Affected Software1
OSV
OSV
•added 2024/07/21 7:15 a.m.•20 views

CVE-2024-37538

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Thomas Kuhlmann Link To Bible allows Stored XSS.This issue affects Link To Bible: from n/a through 2.5.9...

5.4CVSS5.8AI score0.00274EPSS
SaveExploits0References1
NVD
NVD
•added 2024/07/21 7:15 a.m.•38 views

CVE-2024-37538

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Thomas Kuhlmann Link To Bible allows Stored XSS.This issue affects Link To Bible: from n/a through 2.5.9...

5.9CVSS0.00274EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/21 7:03 a.m.•68 views

CVE-2024-37538

CVE-2024-37538: Link To Bible WordPress plugin (

5.9CVSS5.8AI score0.00274EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/07/21 7:03 a.m.•12 views

CVE-2024-37538 WordPress Link To Bible plugin <= 2.5.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Thomas Kuhlmann Link To Bible allows Stored XSS.This issue affects Link To Bible: from n/a through 2.5.9...

5.9CVSS6.8AI score0.00274EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/21 12:00 a.m.•5 views

CVE-2024-37538: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Thomas Kuhlmann Link To Bible allows Stored XSS.This issue affects Link To Bible: from n/a through 2.5.9...

5.9CVSS5.8AI score0.00274EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/07/21 12:00 a.m.•4 views

PT-2024-27636

Name of the Vulnerable Software and Affected Versions Link To Bible versions n/a through 2.5.9 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations For versions...

5.9CVSS0.00274EPSS
SaveExploits0References6
Patchstack
Patchstack
•added 2024/07/06 12:07 p.m.•15 views

WordPress Link To Bible plugin <= 2.5.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Sharanabasappa Patchstack Alliance in WordPress Plugin Link To Bible versions = 2.5.9...

5.9CVSS6.1AI score0.00274EPSS
SaveExploits0Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:46 p.m.•8 views

Malicious code in active-link_to (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:46 p.m.•10 views

Malicious code in actionview-link-to_blank (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
OSV
OSV
•added 2024/06/05 6:15 a.m.•16 views

CVE-2024-3667

The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Link To' field of multiple widgets in all versions up to, and including, 2.4.43 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

5.4CVSS6AI score0.00322EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/05 12:00 a.m.•5 views

CVE-2024-3667: Improper Neutralization of Input During Web Page Generation

The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Link To' field of multiple widgets in all versions up to, and including, 2.4.43 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

7.4CVSS6AI score0.00322EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/05 12:00 a.m.•19 views

PT-2024-27113 · WordPress · Brizy

Name of the Vulnerable Software and Affected Versions: Brizy – Page Builder plugin for WordPress versions up to, and including, 2.4.43 Description: The issue is related to Stored Cross-Site Scripting via the Link To field of multiple widgets due to insufficient input sanitization and output...

7.4CVSS5.8AI score0.00322EPSS
SaveExploits0References6
OSV
OSV
•added 2024/02/05 10:16 p.m.•20 views

CVE-2024-0834

The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the linkto parameter in all versions up to, and including, 1.12.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor...

5.4CVSS6AI score0.00531EPSS
SaveExploits0References3
OSV
OSV
•added 2024/02/05 10:16 p.m.•15 views

CVE-2024-0823

The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Link To' url in carousels in all versions up to, and including, 2.6.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

5.4CVSS5.9AI score0.00423EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/02/05 12:00 a.m.•5 views

PT-2024-15853

Name of the Vulnerable Software and Affected Versions Elementor Addon Elements plugin for WordPress versions up to, and including, 1.12.11 Description The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping, allowing authenticated attackers...

6.4CVSS5.8AI score0.00531EPSS
SaveExploits0References7
Rows per page
Query Builder