Lucene search
+L

9 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 12:15 a.m.•14 views

CVE-2022-4663

The Members Import plugin for WordPress is vulnerable to Self Cross-Site Scripting via the userlogin parameter in an imported CSV file in versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web...

6.1CVSS6.2AI score0.00648EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/01/03 2:15 p.m.•9 views

CVE-2022-4663

The Members Import plugin for WordPress is vulnerable to Self Cross-Site Scripting via the userlogin parameter in an imported CSV file in versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web...

6.1CVSS6.5AI score0.00648EPSS
SaveExploits1References3
OSV
OSV
•added 2023/01/03 2:15 p.m.•18 views

CVE-2022-4663

The Members Import plugin for WordPress is vulnerable to Self Cross-Site Scripting via the userlogin parameter in an imported CSV file in versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web...

6.1CVSS5.9AI score0.00648EPSS
SaveExploits1References2
NVD
NVD
•added 2023/01/03 2:15 p.m.•33 views

CVE-2022-4663

The Members Import plugin for WordPress is vulnerable to Self Cross-Site Scripting via the userlogin parameter in an imported CSV file in versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web...

6.1CVSS5.4AI score0.00648EPSS
SaveExploits1References3
CVE
CVE
•added 2023/01/03 1:56 p.m.•80 views

CVE-2022-4663

CVE-2022-4663 affects the WordPress Members Import plugin (versions

6.1CVSS5.9AI score0.00648EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2023/01/03 12:00 a.m.•15 views

WordPress Plugin Members Import 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.1CVSS6AI score0.00648EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/03 12:00 a.m.•4 views

CVE-2022-4663: Improper Neutralization of Input During Web Page Generation

The Members Import plugin for WordPress is vulnerable to Self Cross-Site Scripting via the userlogin parameter in an imported CSV file in versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web...

6.1CVSS6AI score0.00648EPSS
SaveExploits1References3
Patchstack
Patchstack
•added 2023/01/03 12:00 a.m.•25 views

WordPress Members Import Plugin <= 1.4.2 is vulnerable to Cross Site Scripting (XSS)

Software Members Import Type Plugin Vulnerable versions = 1.4.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4663 Patch priority Low CVSS severity Low 4.4 Developer Claim ownership PSID d4d45be3e61f Credits Saeed Alzahrani Required...

6.1CVSS5.8AI score0.00648EPSS
SaveExploits1References2Affected Software1
zdt
zdt
•added 2011/05/02 12:00 a.m.•41 views

Phire CMS <= 1.1 Files Disclosure Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

7.1AI score
SaveExploits0
Rows per page
Query Builder