Lucene search
+L

4377 matches found

Vulnrichment
Vulnrichment
•added 2025/01/16 8:07 p.m.•9 views

CVE-2025-23827 WordPress Strx Magic Floating Sidebar Maker plugin <= 1.4.1 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in straps Strx Magic Floating Sidebar Maker strx-magic-floating-sidebar-maker allows Stored XSS.This issue affects Strx Magic Floating Sidebar Maker: from n/a through = 1.4.1...

7.1CVSS7.2AI score0.00411EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/16 8:07 p.m.•28 views

CVE-2025-23827 WordPress Strx Magic Floating Sidebar Maker plugin <= 1.4.1 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in straps Strx Magic Floating Sidebar Maker strx-magic-floating-sidebar-maker allows Stored XSS.This issue affects Strx Magic Floating Sidebar Maker: from n/a through = 1.4.1...

7.1CVSS0.00411EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/16 8:07 p.m.•60 views

CVE-2025-23827

CVE-2025-23827 affects Strx Magic Floating Sidebar Maker (WordPress plugin). Description: Stored XSS due to improper neutralization of input during web page generation. Impact: stored Cross-Site Scripting via vulnerable input; affects Strx Magic Floating Sidebar Maker versions from n/a up to and ...

7.1CVSS7.2AI score0.00411EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/16 6:43 p.m.•13 views

WordPress Magic Google Maps plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Magic Google Maps versions = 1.0.4...

6.5CVSS6.1AI score0.00227EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/01/16 6:42 p.m.•12 views

WordPress Strx Magic Floating Sidebar Maker plugin <= 1.4.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin Strx Magic Floating Sidebar Maker versions = 1.4.1...

7.1CVSS6.2AI score0.00411EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2025/01/16 12:00 a.m.•18 views

WordPress plugin Magic Google Maps 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.7AI score0.00227EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/01/16 12:00 a.m.•12 views

WordPress plugin Strx Magic Floating Sidebar Maker 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS7.7AI score0.00411EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/16 12:00 a.m.•5 views

PT-2025-5214

Name of the Vulnerable Software and Affected Versions Magic Google Maps versions 1.0.4 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in the Magic Google Maps plugin...

6.5CVSS0.00227EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/16 12:00 a.m.•3 views

CVE-2025-23827: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in straps Strx Magic Floating Sidebar Maker strx-magic-floating-sidebar-maker allows Stored XSS.This issue affects Strx Magic Floating Sidebar Maker: from n/a through = 1.4.1...

7.1CVSS5.8AI score0.00411EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/16 12:00 a.m.•5 views

CVE-2025-23935: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fengler Magic Google Maps magic-google-maps allows Stored XSS.This issue affects Magic Google Maps: from n/a through = 1.0.4...

6.5CVSS5.8AI score0.00227EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/16 12:00 a.m.•4 views

PT-2025-5125

Name of the Vulnerable Software and Affected Versions Strx Magic Floating Sidebar Maker versions 1.4.1 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an attacker can...

7.1CVSS0.00411EPSS
SaveExploits0References4
NVD
NVD
•added 2024/12/31 1:15 p.m.•28 views

CVE-2024-56205

Incorrect Privilege Assignment vulnerability in SunnyKai AI Magic newsletter-page-redirects allows Privilege Escalation.This issue affects AI Magic: from n/a through = 1.0.4...

9.8CVSS0.0064EPSS
SaveExploits0References1
Prion
Prion
•added 2024/12/31 1:15 p.m.•22 views

CVE-2024-56205

Incorrect Privilege Assignment vulnerability in AI Magic allows Privilege Escalation.This issue affects AI Magic: from n/a through 1.0.4...

0.0064EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/31 12:43 p.m.•16 views

CVE-2024-56205 WordPress AI Magic – SEO Content Generator & Article Writer plugin <= 1.0.4 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in SunnyKai AI Magic newsletter-page-redirects allows Privilege Escalation.This issue affects AI Magic: from n/a through = 1.0.4...

9.8CVSS8.6AI score0.0064EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/31 12:43 p.m.•78 views

CVE-2024-56205

CVE-2024-56205 concerns WordPress plugin AI Magic (versions n/a through 1.0.4). The issue is an Incorrect Privilege Assignment vulnerability that enables Privilege Escalation due to a permission assignment error in AI Magic. Exploitation details are not provided in the documents; the CVE entry li...

9.8CVSS7.2AI score0.0064EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/31 12:00 a.m.•9 views

CVE-2024-56205: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in SunnyKai AI Magic newsletter-page-redirects allows Privilege Escalation.This issue affects AI Magic: from n/a through = 1.0.4...

9.8CVSS5.8AI score0.0064EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/31 12:00 a.m.•21 views

PT-2024-36740 · Ai Magic · Ai Magic

Name of the Vulnerable Software and Affected Versions: AI Magic versions n/a through 1.0.4 Description: The issue is related to an Incorrect Privilege Assignment vulnerability, which allows Privilege Escalation in AI Magic. This vulnerability can lead to privilege escalation. Recommendations: For...

9.8CVSS9.4AI score0.0064EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2024/12/31 12:00 a.m.•22 views

WordPress plugin AI Magic 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS8.2AI score0.0064EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv
•added 2024/12/28 12:00 p.m.•50 views

clipass (0.1.0), clipperd (>=0.1.1, <=0.1.5) +13 more potentially affected by unknown CVE via magic-crypt (3.1.13)

magic-crypt CARGO version 3.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on magic-crypt and may be impacted: - clipass 0.1.0 - clipperd =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =2.0.0, =1.0.0, =1.0.1, =0.1.0, =0.1.0, =0.6.1, =0.1.0, =0.1.4 Source...

5.8AI score
SaveExploits0
Patchstack
Patchstack
•added 2024/12/18 7:24 p.m.•17 views

WordPress AI Magic – SEO Content Generator & Article Writer plugin <= 1.0.4 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Mika in WordPress Plugin AI Magic versions = 1.0.4...

9.8CVSS7AI score0.0064EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder