Lucene search
+L

7915 matches found

VulnCheck KEV
VulnCheck KEV
added 2024/08/16 12:00 a.m.4 views

VulnCheck KEV: CVE-2024-43306

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Lab WP-Lister Lite for eBay wp-lister-for-ebay.This issue affects WP-Lister Lite for eBay: from n/a through = 3.6.0...

7.1CVSS5.8AI score0.00289EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/08/16 12:00 a.m.10 views

WordPress GivingPress Lite Theme <= 1.8.6 is vulnerable to Cross Site Scripting (XSS)

Software GivingPress Lite Type Theme Vulnerable versions = 1.8.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43352 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID dc2d25ba2424 Credits stealthcopter Required privilege...

6.5CVSS6.6AI score0.00253EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/08/16 12:00 a.m.12 views

WordPress WP-Lister Lite for eBay Plugin <= 3.6.0 is vulnerable to Cross Site Scripting (XSS)

Software WP-Lister Lite for eBay Type Plugin Vulnerable versions = 3.6.0 Fixed in 3.6.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43306 Patch priority Medium CVSS severity Medium 7.1 Developer WP Lab PSID d4c17ecc0795 Credits LVT-tholv2k Required privilege...

7.1CVSS6.6AI score0.00289EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/08/16 12:00 a.m.18 views

WordPress Bold Timeline Lite Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)

Software Bold Timeline Lite Type Plugin Vulnerable versions = 1.2.0 Fixed in 1.2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43294 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 636116c40c53 Credits LVT-tholv2k Required privilege...

6.5CVSS6.6AI score0.00253EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2024/08/13 11:15 a.m.21 views

CVE-2024-43128

Improper Control of Generation of Code 'Code Injection' vulnerability in WC Product Table WooCommerce Product Table Lite allows Code Injection.This issue affects WooCommerce Product Table Lite: from n/a through 3.5.1...

7.3CVSS0.00282EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/13 11:15 a.m.10 views

CVE-2024-43128

Improper Control of Generation of Code 'Code Injection' vulnerability in WC Product Table WooCommerce Product Table Lite allows Code Injection.This issue affects WooCommerce Product Table Lite: from n/a through 3.5.1...

7.3CVSS5.8AI score0.00282EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/13 10:52 a.m.38 views

CVE-2024-43128 WordPress WooCommerce Product Table Lite plugin <= 3.5.1 - Arbitrary Code Execution vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in WC Product Table WooCommerce Product Table Lite allows Code Injection.This issue affects WooCommerce Product Table Lite: from n/a through 3.5.1...

6.5CVSS0.00282EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/13 10:52 a.m.17 views

CVE-2024-43128 WordPress WooCommerce Product Table Lite plugin <= 3.5.1 - Arbitrary Code Execution vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in WC Product Table WooCommerce Product Table Lite allows Code Injection.This issue affects WooCommerce Product Table Lite: from n/a through 3.5.1...

6.5CVSS7.1AI score0.00282EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/13 10:52 a.m.74 views

CVE-2024-43128

CVE-2024-43128 in WooCommerce Product Table Lite (WC Product Table Lite) is an improper generation of code vulnerability. Affected versions are WC Product Table Lite from 0 through 3.5.1, with an unauthenticated code/shortcode execution path. The issue is resolved by upgrading to version 3.5.1 (t...

7.3CVSS7.1AI score0.00282EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/08/13 12:00 a.m.13 views

WordPress plugin WooCommerce Product Table Lite 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

7.3CVSS7.3AI score0.00282EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/08/12 11:15 p.m.8 views

CVE-2024-43147

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Merkulove Selection Lite allows Stored XSS.This issue affects Selection Lite: from n/a through 1.11...

6.5CVSS5.2AI score0.00259EPSS
SaveExploits0References2
NVD
NVD
added 2024/08/12 11:15 p.m.44 views

CVE-2024-43147

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Merkulove Selection Lite allows Stored XSS.This issue affects Selection Lite: from n/a through 1.11...

6.5CVSS0.00259EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/12 10:17 p.m.18 views

CVE-2024-43147 WordPress Selection Lite plugin <= 1.11 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Merkulove Selection Lite allows Stored XSS.This issue affects Selection Lite: from n/a through 1.11...

6.5CVSS6.8AI score0.00259EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/12 10:17 p.m.49 views

CVE-2024-43147 WordPress Selection Lite plugin <= 1.11 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Merkulove Selection Lite allows Stored XSS.This issue affects Selection Lite: from n/a through 1.11...

6.5CVSS0.00259EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/12 10:17 p.m.58 views

CVE-2024-43147

CVE-2024-43147 corresponds to a Stored XSS vulnerability in the Merkulove Selection Lite WordPress plugin. The vulnerability affects Selection Lite versions up to 1.11, and is described as Improper Neutralization of Input During Web Page Generation (XSS). The Wordfence vulnerability details indic...

6.5CVSS6.4AI score0.00259EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/12 10:15 p.m.11 views

CVE-2024-43151

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder – Lite allows Stored XSS.This issue affects Ultimate Addons for Beaver Builder – Lite: from n/a through 1.5.9...

5.4CVSS5.8AI score0.0026EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2024/08/12 10:15 p.m.6 views

CVE-2024-43151

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder – Lite allows Stored XSS.This issue affects Ultimate Addons for Beaver Builder – Lite: from n/a through 1.5.9...

6.5CVSS5.2AI score0.0026EPSS
SaveExploits0References2
OSV
OSV
added 2024/08/12 1:38 p.m.10 views

CVE-2024-7685

A vulnerability, which was classified as problematic, has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected by this issue is some unknown functionality of the file adds.php. The manipulation of the argument name/dob/email/mobile/address leads to cross site...

5.4CVSS4AI score0.00489EPSS
SaveExploits1References4
NVD
NVD
added 2024/08/12 1:38 p.m.30 views

CVE-2024-7685

A vulnerability, which was classified as problematic, has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected by this issue is some unknown functionality of the file adds.php. The manipulation of the argument name/dob/email/mobile/address leads to cross site...

5.4CVSS0.00489EPSS
SaveExploits1References4
NVD
NVD
added 2024/08/12 1:38 p.m.23 views

CVE-2024-7686

A vulnerability, which was classified as problematic, was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This affects an unknown part of the file registercase.php. The manipulation of the argument title/description/oppositelawyer leads to cross site scripting. It is...

5.4CVSS0.0047EPSS
SaveExploits1References4
Rows per page
Query Builder