Lucene search
+L

1832 matches found

CNNVD
CNNVD
added 2025/01/30 12:00 a.m.13 views

WordPress plugin Bulk Me Now! 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPre...

4.3CVSS8.2AI score0.00167EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/01/30 12:00 a.m.8 views

WordPress plugin Bulk Me Now! 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPre...

7.1CVSS7.8AI score0.00537EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/01/30 12:00 a.m.8 views

PT-2025-1923

Name of the Vulnerable Software and Affected Versions Bulk Me Now! WordPress plugin versions through 2.0 Description The issue is related to a Reflected Cross-Site Scripting problem, where a parameter is not properly sanitised and escaped before being outputted back in the page. This could be...

7.1CVSS8.1AI score0.00537EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2025/01/30 12:00 a.m.5 views

PT-2025-1931 · WordPress · Bulk Me Now!

Name of the Vulnerable Software and Affected Versions: Bulk Me Now! WordPress plugin through 2.0 Description: The issue is related to the plugin not validating and escaping some of its shortcode attributes before outputting them back in a page or post, which could allow users with the contributor...

7.1CVSS8.2AI score0.00261EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/01/28 12:00 a.m.7 views

Rockwell Automation FactoryTalk View ME 安全漏洞

Rockwell Automation FactoryTalk View ME is a human-machine interface HMI software from Rockwell Automation, Inc. that is used to create and deploy monitoring and control interfaces that run on factory equipment and machines. A security vulnerability exists in Rockwell Automation FactoryTalk View ...

9.3CVSS6.6AI score0.00727EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/28 12:00 a.m.11 views

PT-2025-1322 · Rockwell Automation · Factorytalk View Se

Name of the Vulnerable Software and Affected Versions: Rockwell Automation FactoryTalk View ME affected versions not specified Description: A remote code execution issue exists due to lack of input sanitation, which could allow a remote attacker to run commands or code as a high privileged user...

10CVSS8AI score0.00727EPSS
SaveExploits0References14
Cvelist
Cvelist
added 2025/01/25 7:24 a.m.25 views

CVE-2024-12512 Ask Me Anything (Anonymously) <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Ask Me Anything Anonymously plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'askmeanythingpeople' shortcode in all versions up to, and including, 1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possib...

6.4CVSS0.00246EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/25 12:00 a.m.12 views

PT-2025-1876 · WordPress · Ask Me Anything (Anonymously) Plugin

Name of the Vulnerable Software and Affected Versions: Ask Me Anything Anonymously plugin for WordPress versions up to, and including, 1.6 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'askmeanythingpeople' shortcode due to insufficient input sanitization and...

6.4CVSS6.2AI score0.00246EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/01/25 12:00 a.m.7 views

WordPress plugin Ask Me Anything 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.4CVSS7.8AI score0.00246EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2025/01/24 11:15 a.m.4 views

CVE-2025-23711

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Quincy Kwende Quote me quote-me allows Reflected XSS.This issue affects Quote me: from n/a through = 1.0...

7.1CVSS7.2AI score0.0023EPSS
SaveExploits0References3
NVD
NVD
added 2025/01/24 11:15 a.m.20 views

CVE-2025-23711

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Quincy Kwende Quote me quote-me allows Reflected XSS.This issue affects Quote me: from n/a through = 1.0...

7.1CVSS0.0023EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/24 10:52 a.m.7 views

CVE-2025-23711 WordPress Quote me plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Quote me allows Reflected XSS. This issue affects Quote me: from n/a through 1.0...

7.1CVSS7AI score0.0023EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/24 10:52 a.m.57 views

CVE-2025-23711

CVE-2025-23711 is a Reflected XSS in the WordPress Quote me plugin (

7.1CVSS7.2AI score0.0023EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/24 10:52 a.m.28 views

CVE-2025-23711 WordPress Quote me plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Quincy Kwende Quote me quote-me allows Reflected XSS.This issue affects Quote me: from n/a through = 1.0...

7.1CVSS0.0023EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/24 12:00 a.m.11 views

PT-2025-3397

Name of the Vulnerable Software and Affected Versions NodeBB version 3.11.0 Description A persistent cross-site scripting XSS issue allows remote attackers to store arbitrary code in the 'about me' section of their profile. This enables attackers to execute malicious scripts on the website...

4.6CVSS6.3AI score0.39006EPSS
SaveExploits1References13
NVD
NVD
added 2025/01/16 8:15 p.m.10 views

CVE-2025-23745

Cross-Site Request Forgery CSRF vulnerability in Tussendoor B.V. Call me Now call-me-now allows Stored XSS.This issue affects Call me Now: from n/a through = 1.0.5...

7.1CVSS0.00185EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/16 8:15 p.m.9 views

CVE-2025-23713

Cross-Site Request Forgery CSRF vulnerability in artanik Hack me if you can hack-me-if-you-can allows Stored XSS.This issue affects Hack me if you can: from n/a through = 1.2...

7.1CVSS0.00186EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/16 8:06 p.m.56 views

CVE-2025-23713

The connected Red Hat advisory for CVE-2025-23713 confirms a Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) in the Hack me if you can plugin/app (affected range: from n/a through 1.2). The description in the CVE entry itself also notes a CSRF to Stored XSS vulnerab...

7.1CVSS7.2AI score0.00186EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/16 8:06 p.m.4 views

CVE-2025-23713 WordPress Hack me if you can plugin <= 1.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Artem Anikeev Hack me if you can allows Stored XSS.This issue affects Hack me if you can: from n/a through 1.2...

7.1CVSS6.9AI score0.00186EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/16 8:06 p.m.29 views

CVE-2025-23745 WordPress Call me Now plugin <= 1.0.5 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Tussendoor B.V. Call me Now call-me-now allows Stored XSS.This issue affects Call me Now: from n/a through = 1.0.5...

7.1CVSS0.00185EPSS
SaveExploits0References1
Rows per page
Query Builder