Lucene search
K

11 matches found

CNNVD
CNNVD
added 2026/04/07 12:0 a.m.3 views

MRCMS 安全漏洞

MRCMS is a content management system developed by Marker individuals. Version MRCMS 3.1.2 has a security vulnerability, which stems from improper access control. This vulnerability could allow unauthorized users to add super administrator accounts without authentication...

9.8CVSS5.8AI score0.00032EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/11/19 10:23 a.m.2 views

CVE-2025-13196

The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Open Street Map widget's marker content parameter in all versions up to, and including, 8.3.4. This is due to insufficient input sanitization and output escaping on user-supplied...

5.4CVSS4.9AI score0.00024EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/18 12:30 p.m.2 views

EUVD-2025-197969

The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Open Street Map widget's marker content parameter in all versions up to, and including, 8.3.4. This is due to insufficient input sanitization and output escaping on user-supplied...

5.4CVSS4.6AI score0.00024EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/11/18 9:27 a.m.3 views

CVE-2025-13196 Element Pack Addons for Elementor <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map widget

The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Open Street Map widget's marker content parameter in all versions up to, and including, 8.3.4. This is due to insufficient input sanitization and output escaping on user-supplied...

5.4CVSS0.00024EPSS
Exploits0References2
CVE
CVE
added 2025/11/18 9:27 a.m.7 views

CVE-2025-13196

CVE-2025-13196 (Element Pack Addons for Elementor, WordPress) The vulnerability is a Stored Cross-Site Scripting flaw in the Open Street Map widget’s marker content parameter, affecting all versions up to 8.3.4. Authentication is required (contributors or higher) to inject scripts that execute fo...

5.4CVSS4.7AI score0.00024EPSS
Exploits0References2
CNVD
CNVD
added 2025/08/12 12:0 a.m.2 views

WordPress Element Pack Elementor Addons and Templates Cross-Site Scripting Vulnerability

WordPress Element Pack Elementor Addons and Templates is a powerful plugin for Elementor designed to simplify website design. A cross-site scripting vulnerability exists in WordPress Element Pack Elementor Addons and Templates, which stems from insufficient input cleanup and output escaping of th...

5.4CVSS6.2AI score0.00248EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/08/06 12:0 a.m.1 views

WordPress plugin Element Pack Elementor Addons and Templates 跨站脚本漏洞

WordPress Element Pack Elementor Addons and Templates is a powerful plugin for Elementor designed to simplify website design. A cross-site scripting vulnerability exists in WordPress Element Pack Elementor Addons and Templates, which stems from insufficient input cleanup and output escaping of th...

5.4CVSS6.1AI score0.00248EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/07/18 12:0 a.m.1 views

MRCMS 安全漏洞

MRCMS is a content management system by the individual developers at marker. A security vulnerability exists in MRCMS version 3.1.2, which stems from mishandling of the component /admin/group/save.do, which could lead to a cross-site scripting attack...

4.8CVSS6AI score0.00194EPSS
Exploits1References4
OSV
OSV
added 2024/11/05 12:15 p.m.1 views

CVE-2024-9867

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Open Map Widget' markercontent parameter in all versions up to, and including, 5.10.2 due to insufficient input...

5.4CVSS7.5AI score0.0031EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/11/05 12:0 a.m.1 views

WordPress plugin Element Pack Elementor Addons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.4CVSS7.5AI score0.0031EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/10/28 12:0 a.m.1 views

MRCMS 安全漏洞

MRCMS is a content management system by the individual developer of marker. A security vulnerability exists in MRCMS version 3.1.2, which originates from the RID parameter in /admin/article/delete.do contains a SQL injection vulnerability...

8.8CVSS7.8AI score0.00275EPSS
Exploits1References1
Rows per page
Query Builder