Lucene search
+L

9100 matches found

RedhatCVE
RedhatCVE
•added 2025/12/10 3:13 p.m.•19 views

CVE-2025-63054

Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 10.3.2...

5.3CVSS5.9AI score0.00301EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/10 3:13 p.m.•18 views

CVE-2025-63055

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Liton Arefin Master Addons for Elementor master-addons allows Stored XSS.This issue affects Master Addons for Elementor: from n/a through = 2.0.9.9.4...

6.5CVSS5.9AI score0.00196EPSS
SaveExploits0References1
Snyk
Snyk
•added 2025/12/10 9:30 a.m.•8 views

Access Control Bypass

Overview org.keycloak:keycloak-server-spi-private is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Access Control Bypass via insufficient authorization checks on the /admin/realms/realm/roles...

5.1CVSS5.8AI score0.00351EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/12/09 10:47 p.m.•20 views

Arbitrary Command Injection

Overview cai-framework is a Cybersecurity AI Framework Affected versions of this package are vulnerable to Arbitrary Command Injection via the runsshcommandwithcredentials function. An attacker can execute arbitrary commands on the host system by supplying crafted values for the username, host, o...

9.8CVSS6.2AI score0.02022EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/12/09 6:30 p.m.•23 views

EUVD-2025-201975

Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 10.3.1...

5.3CVSS6.5AI score0.00301EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/12/09 6:30 p.m.•18 views

EUVD-2025-201974

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Liton Arefin Master Addons for Elementor master-addons allows Stored XSS.This issue affects Master Addons for Elementor: from n/a through = 2.0.9.9...

6.5CVSS5.5AI score0.00196EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/12/09 6:30 p.m.•18 views

EUVD-2025-201982

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in averta Master Slider Pro masterslider allows DOM-Based XSS.This issue affects Master Slider Pro: from n/a through = 3.7.12...

6.5CVSS5.9AI score0.0026EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/09 4:18 p.m.•22 views

CVE-2025-63054

Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 10.3.2...

5.3CVSS0.00301EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/09 4:18 p.m.•17 views

CVE-2025-63055

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Liton Arefin Master Addons for Elementor master-addons allows Stored XSS.This issue affects Master Addons for Elementor: from n/a through = 2.0.9.9.4...

6.5CVSS0.00196EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/12/09 4:18 p.m.•17 views

CVE-2025-63045

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in averta Master Slider Pro masterslider allows DOM-Based XSS.This issue affects Master Slider Pro: from n/a through = 3.7.12...

6.5CVSS5.8AI score0.0026EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/09 4:18 p.m.•17 views

CVE-2025-63045

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in averta Master Slider Pro masterslider allows DOM-Based XSS.This issue affects Master Slider Pro: from n/a through = 3.7.12...

6.5CVSS0.0026EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/09 2:52 p.m.•47 views

CVE-2025-63054 WordPress Quiz And Survey Master plugin <= 10.3.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 10.3.2...

5.3CVSS0.00301EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/09 2:52 p.m.•15 views

CVE-2025-63054 WordPress Quiz And Survey Master plugin <= 10.3.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 10.3.2...

5.3CVSS6AI score0.00301EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/09 2:52 p.m.•23 views

CVE-2025-63055

CVE-2025-63055 affects WordPress plugin “Master Addons For Elementor” (and related Master Addons for Elementor variants) where the vulnerability is a Stored Cross-Site Scripting (XSS) caused by improper input neutralization during web page generation. Affected versions are up to and including 2.0...

6.5CVSS5.8AI score0.00196EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/09 2:52 p.m.•47 views

CVE-2025-63055 WordPress Master Addons for Elementor plugin <= 2.0.9.9.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Liton Arefin Master Addons for Elementor master-addons allows Stored XSS.This issue affects Master Addons for Elementor: from n/a through = 2.0.9.9.4...

6.5CVSS0.00196EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/09 2:52 p.m.•13 views

CVE-2025-63055 WordPress Master Addons for Elementor plugin <= 2.0.9.9.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Liton Arefin Master Addons for Elementor master-addons allows Stored XSS.This issue affects Master Addons for Elementor: from n/a through = 2.0.9.9.4...

6.5CVSS5.8AI score0.00196EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/09 2:52 p.m.•36 views

CVE-2025-63054

CVE-2025-63054 is a Missing Authorization issue in WordPress plugin Quiz And Survey Master (QSM) – Quiz Master Next. The vulnerability arises from incorrectly configured access control, enabling unauthorized access due to insufficient authorization checks. Affected software: Quiz And Survey Maste...

5.3CVSS6AI score0.00301EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/09 2:52 p.m.•9 views

CVE-2025-63045 WordPress Master Slider Pro plugin <= 3.7.12 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in averta Master Slider Pro masterslider allows DOM-Based XSS.This issue affects Master Slider Pro: from n/a through = 3.7.12...

6.5CVSS5.8AI score0.0026EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/09 2:52 p.m.•33 views

CVE-2025-63045

CVE-2025-63045 describes a DOM-based XSS in the WordPress plugin Master Slider Pro (versions

6.5CVSS5.8AI score0.0026EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/12/09 2:52 p.m.•46 views

CVE-2025-63045 WordPress Master Slider Pro plugin <= 3.7.12 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in averta Master Slider Pro masterslider allows DOM-Based XSS.This issue affects Master Slider Pro: from n/a through = 3.7.12...

6.5CVSS0.0026EPSS
SaveExploits0References1
Rows per page
Query Builder