Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 8:59 a.m.2 views

CVE-2023-49186

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in KlbTheme Machic Core allows DOM-Based XSS.This issue affects Machic Core: from n/a through 1.2.6...

7.1CVSS6.4AI score0.00106EPSS
Exploits0References1
NVD
NVD
added 2026/01/05 2:15 p.m.1 views

CVE-2023-49186

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in KlbTheme Machic Core allows DOM-Based XSS.This issue affects Machic Core: from n/a through 1.2.6...

7.1CVSS0.00106EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/05 1:27 p.m.2 views

CVE-2023-49186 WordPress Machic Core plugin <= 1.2.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in KlbTheme Machic Core allows DOM-Based XSS.This issue affects Machic Core: from n/a through 1.2.6...

7.1CVSS6AI score0.00106EPSS
Exploits0References1
EUVD
EUVD
added 2026/01/05 1:27 p.m.2 views

EUVD-2023-53191

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in KlbTheme Machic Core allows DOM-Based XSS.This issue affects Machic Core: from n/a through 1.2.6...

7.1CVSS7.9AI score0.00106EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/01/05 1:27 p.m.21 views

CVE-2023-49186 WordPress Machic Core plugin <= 1.2.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in KlbTheme Machic Core allows DOM-Based XSS.This issue affects Machic Core: from n/a through 1.2.6...

7.1CVSS0.00106EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/05 12:0 a.m.2 views

WordPress plugin Machic Core 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS8AI score0.00106EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/05 12:0 a.m.3 views

PT-2026-1279

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in KlbTheme Machic Core allows DOM-Based XSS.This issue affects Machic Core: from n/a through 1.2.6...

7.1CVSS6.4AI score0.00106EPSS
Exploits0References2
WPVulnDB
WPVulnDB
added 2023/12/08 12:0 a.m.9 views

Machic Core <= 1.2.6 - Reflected Cross-Site Scripting

Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.3AI score0.00106EPSS
Exploits0References1
Patchstack
Patchstack
added 2023/11/29 12:0 a.m.5 views

WordPress Machic Core Plugin <= 1.2.6 is vulnerable to Cross Site Scripting (XSS)

Software Machic Core Type Plugin Vulnerable versions = 1.2.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-49186 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a0c9d73f4a61 Credits RE-ALTER Required privilege...

6.6AI score0.00106EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder