Lucene search
+L

4071 matches found

NVD
NVD
added 2023/08/30 1:15 p.m.23 views

CVE-2023-33929

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Joaquín Ruiz Easy Admin Menu plugin = 1.3 versions...

5.9CVSS5.4AI score0.00366EPSS
SaveExploits0References1
Prion
Prion
added 2023/08/30 1:15 p.m.22 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Joaquín Ruiz Easy Admin Menu plugin = 1.3 versions...

4.3CVSS4.8AI score0.00366EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/30 12:52 p.m.9 views

CVE-2023-33929 WordPress Easy Admin Menu Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Joaquín Ruiz Easy Admin Menu plugin = 1.3 versions...

5.9CVSS5.6AI score0.00366EPSS
SaveExploits0References1
CVE
CVE
added 2023/08/30 12:52 p.m.99 views

CVE-2023-33929

CVE-2023-33929 : A stored Cross-Site Scripting (XSS) vulnerability exists in the WordPress plugin Easy Admin Menu by Joaquín Ruiz, affecting versions 1.3 or apply vendor-provided mitigation if available. If upgrading is not possible, monitor for updates from the plugin vendor and affected sites.

5.9CVSS5AI score0.00366EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/08/30 12:00 a.m.6 views

WordPress plugin easy-admin-menu 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6.3AI score0.00366EPSS
SaveExploits0References2
NVD
NVD
added 2023/08/28 8:15 p.m.23 views

CVE-2023-39578

A stored cross-site scripting XSS vulnerability in the Create function of Zenario CMS v9.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu navigation text field...

4.8CVSS5AI score0.00379EPSS
SaveExploits2References2
ATTACKERKB
ATTACKERKB
added 2023/08/28 8:15 p.m.6 views

CVE-2023-39578

A stored cross-site scripting XSS vulnerability in the Create function of Zenario CMS v9.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu navigation text field...

4.8CVSS5.9AI score0.00379EPSS
SaveExploits2References3
OSV
OSV
added 2023/08/28 8:15 p.m.8 views

CVE-2023-39578

A stored cross-site scripting XSS vulnerability in the Create function of Zenario CMS v9.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu navigation text field...

4.8CVSS5.9AI score0.00379EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
added 2023/08/28 12:00 a.m.9 views

CVE-2023-39578

A stored cross-site scripting XSS vulnerability in the Create function of Zenario CMS v9.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu navigation text field...

5.6AI score0.00379EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2023/08/28 12:00 a.m.33 views

CVE-2023-39578

A stored cross-site scripting XSS vulnerability in the Create function of Zenario CMS v9.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu navigation text field...

5.1AI score0.00379EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2023/08/28 12:00 a.m.8 views

PT-2023-27026 · Unknown · Zenario Cms

Name of the Vulnerable Software and Affected Versions: Zenario CMS version 9.4 Description: A stored cross-site scripting XSS vulnerability in the Create function allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu navigation text field. This...

4.8CVSS5AI score0.00379EPSS
SaveExploits2References9
OSV
OSV
added 2023/08/24 12:15 p.m.8 views

CVE-2023-32516

Unauth. Reflected Cross-Site Scripting XSS vulnerability in GloriaFood Restaurant Menu – Food Ordering System – Table Reservation plugin = 2.3.6 versions...

6.1CVSS5.8AI score0.00385EPSS
SaveExploits0References1
NVD
NVD
added 2023/08/24 12:15 p.m.24 views

CVE-2023-32516

Unauth. Reflected Cross-Site Scripting XSS vulnerability in GloriaFood Restaurant Menu – Food Ordering System – Table Reservation plugin = 2.3.6 versions...

7.1CVSS6.2AI score0.00385EPSS
SaveExploits0References1
Prion
Prion
added 2023/08/24 12:15 p.m.18 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in GloriaFood Restaurant Menu – Food Ordering System – Table Reservation plugin = 2.3.6 versions...

5.8CVSS6AI score0.00385EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/24 11:21 a.m.18 views

CVE-2023-32516 WordPress Restaurant Menu – Food Ordering System – Table Reservation Plugin <= 2.3.6 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in GloriaFood Restaurant Menu – Food Ordering System – Table Reservation plugin = 2.3.6 versions...

7.1CVSS5.9AI score0.00385EPSS
SaveExploits0References1
CVE
CVE
added 2023/08/24 11:21 a.m.50 views

CVE-2023-32516

CVE-2023-32516 corresponds to an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin GloriaFood Restaurant Menu – Food Ordering System – Table Reservation . Affected versions are

7.1CVSS6AI score0.00385EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/08/24 12:00 a.m.10 views

WordPress plugin Restaurant Menu – Food Ordering System – Table Reservation 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Restaurant Menu - Food...

7.1CVSS6.8AI score0.00385EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/08/08 12:00 a.m.18 views

WordPress Bubble Menu – circle floating menu Plugin < 3.0.5 is vulnerable to Cross Site Scripting (XSS)

Software Bubble Menu – circle floating menu Type Plugin Vulnerable versions 3.0.5 Fixed in 3.0.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-3650 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 29b436660257 Credits Dipak...

4.8CVSS5.7AI score0.00716EPSS
SaveExploits2References3Affected Software1
OSV
OSV
added 2023/08/07 3:15 p.m.7 views

CVE-2023-3650

The Bubble Menu WordPress plugin before 3.0.5 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example, in multisite setup...

4.8CVSS5.8AI score
SaveExploits0References1
CVE
CVE
added 2023/08/07 2:31 p.m.59 views

CVE-2023-3650

CVE-2023-3650 affects the WordPress Bubble Menu plugin (versions before 3.0.5). The issue is that the plugin does not sanitize and escape certain settings, enabling stored Cross-Site Scripting by high-privilege users (e.g., admins) even when unfiltered_html is disallowed (notably in multisite set...

4.8CVSS4.7AI score0.00716EPSS
SaveExploits2References1Affected Software1
Rows per page
Query Builder