Lucene search
K

9 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-43842

Malicious code in bioql PyPI...

7.2CVSS6.6AI score0.01283EPSS
Exploits0References2
Patchstack
Patchstack
added 2023/07/18 12:0 a.m.4 views

WordPress Mail Control Plugin <= 0.2.8 is vulnerable to Cross Site Scripting (XSS)

Software Mail Control Type Plugin Vulnerable versions = 0.2.8 Fixed in 0.3.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 341355a3220a Credits Rafie Muhammad Patchstack Required...

6.8AI score
Exploits0References3Affected Software1
OSV
OSV
added 2023/07/12 5:15 a.m.0 views

CVE-2023-3158

The Mail Control plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 0.2.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

6.1CVSS7.4AI score
Exploits0References2
CVE
CVE
added 2023/07/12 4:38 a.m.37 views

CVE-2023-3158

CVE-2023-3158 concerns the Mail Control WordPress plugin (versions up to and including 0.2.8) with a stored XSS flaw in the email subject caused by insufficient input sanitization and output escaping. Unauthenticated attackers could inject scripts that run when users load injected pages. Multiple...

7.2CVSS5.9AI score0.01283EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2023/07/12 4:38 a.m.22 views

CVE-2023-3158 Mail Control <= 0.2.8 - Unauthenticated Stored Cross-Site Scripting via Email Subject

The Mail Control plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 0.2.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

7.2CVSS6.4AI score0.01283EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2023/07/12 4:38 a.m.19 views

CVE-2023-3158 Mail Control <= 0.2.8 - Unauthenticated Stored Cross-Site Scripting via Email Subject

The Mail Control plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 0.2.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

7.2CVSS6.9AI score0.01283EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/07/12 12:0 a.m.1 views

WordPress Plugin Mail Control 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

7.2CVSS6.6AI score0.01283EPSS
Exploits0References3
Patchstack
Patchstack
added 2023/07/11 12:0 a.m.7 views

WordPress Mail Control Plugin <= 0.3.1 is vulnerable to Cross Site Scripting (XSS)

Software Mail Control Type Plugin Vulnerable versions = 0.3.1 Fixed in 0.3.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-3158 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 0eca928a8cff Credits Alex Thomas Required...

7.2CVSS5.7AI score0.01283EPSS
Exploits0References3Affected Software1
myhack58
myhack58
added 2009/12/01 12:0 a.m.12 views

Domain name hijacking assault a few steps as follows-vulnerability warning-the black bar safety net

1, access to the hijacking of the domain name registration information The attacker will first access network solutions company www. networksolutions is. com, via the company home page The MAKE CHANGES function, enter you want to query the domain to get the domain name registration information to...

0.7AI score
Exploits0
Rows per page
Query Builder