Lucene search
+L

869 matches found

Cvelist
Cvelist
added 2024/11/09 11:54 a.m.22 views

CVE-2024-51718 WordPress Simple Modal plugin <= 0.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arsdehnel Simple Modal simplemodal allows Cross-Site Scripting XSS.This issue affects Simple Modal: from n/a through = 0.3.3...

7.1CVSS0.00259EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/09 12:0 a.m.4 views

WordPress plugin Media Modal 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6AI score0.00209EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/09 12:0 a.m.6 views

PT-2024-34746 · Unknown · Media Modal

Name of the Vulnerable Software and Affected Versions: Media Modal versions through 1.0.2 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS vulnerability, which allows for DOM-Based XSS attacks. This means...

6.5CVSS5.6AI score0.00209EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/11/09 12:0 a.m.11 views

PT-2024-34864 · Unknown · Simple Modal

Name of the Vulnerable Software and Affected Versions: Simple Modal versions 0.3.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks. Recommendations: For...

7.1CVSS5.7AI score0.00259EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/11/09 12:0 a.m.6 views

WordPress plugin Simple Modal 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.7AI score0.00259EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/11/04 9:47 a.m.6 views

WordPress Simple Modal plugin <= 0.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Simple Modal versions = 0.3.3...

7.1CVSS6.1AI score0.00259EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/11/04 12:0 a.m.8 views

WordPress Simple Modal Plugin <= 0.3.3 is vulnerable to Cross Site Scripting (XSS)

Software Simple Modal Type Plugin Vulnerable versions = 0.3.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51718 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 97fa1290c928 Credits João Pedro S Alcântara Kinorth Requir...

7.1CVSS6.9AI score0.00259EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/10/31 2:33 p.m.4 views

WordPress Media Modal plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Media Modal versions = 1.0.2...

6.5CVSS6.1AI score0.00209EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/10/31 12:0 a.m.17 views

WordPress Media Modal Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Media Modal Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51604 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 449689ed3e52 Credits SOPROBRO Required privilege Contributor...

6.5CVSS6.9AI score0.00209EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/10/16 7:31 a.m.34 views

CVE-2024-9540 Sina Extension for Elementor <= 3.5.7 - Authenticated (Contributor+) Sensitive Information Exposure via Sina Modal Box Widget Elementor Template

The Sina Extension for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.7 via the render function in widgets/advanced/sina-modal-box.php. This makes it possible for authenticated attackers, with Contributor-level access and...

4.3CVSS0.004EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/10/15 8:44 p.m.7 views

WordPress Sina Extension for Elementor plugin <= 3.5.7 - Authenticated (Contributor+) Sensitive Information Exposure via Sina Modal Box Widget Elementor Template vulnerability

Authenticated Contributor+ Sensitive Information Exposure via Sina Modal Box Widget Elementor Template vulnerability discovered by Nishiv in WordPress Plugin Sina Extension for Elementor versions = 3.5.7...

4.3CVSS7AI score0.004EPSS
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/09/08 5:17 p.m.6 views

Malicious code in @sky-team/create-project-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c63ed97fa2890cd36683d943cad94b27fa57e5a87b9b16fa38a55970163af5a1 The OpenSSF Package Analysis project identified '@sky-team/create-project-modal' @ 99.50.55 npm as malicious. It is considered malicious because...

6.9AI score
SaveExploits0
OSV
OSV
added 2024/09/08 5:17 p.m.16 views

MAL-2024-8841 Malicious code in @sky-team/create-project-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c63ed97fa2890cd36683d943cad94b27fa57e5a87b9b16fa38a55970163af5a1 The OpenSSF Package Analysis project identified '@sky-team/create-project-modal' @ 99.50.55 npm as malicious. It is considered malicious because...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/26 12:0 a.m.346 views

Simple College Website 1.0 SQL Injection / Code Execution

============================================================================================================================================= | Title : Simple College Website 1.0 WYSIWYG Settings Management Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla...

7.4AI score
SaveExploits0
NVD
NVD
added 2024/08/18 2:15 p.m.34 views

CVE-2024-43346

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wow-Company Modal Window allows Stored XSS.This issue affects Modal Window: from n/a through 6.0.3...

6.5CVSS0.00261EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/18 2:15 p.m.6 views

CVE-2024-43346

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wow-Company Modal Window allows Stored XSS.This issue affects Modal Window: from n/a through 6.0.3...

5.4CVSS5.8AI score0.00261EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/18 1:18 p.m.40 views

CVE-2024-43346 WordPress Modal Window – create popup modal window plugin <= 6.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wow-Company Modal Window allows Stored XSS.This issue affects Modal Window: from n/a through 6.0.3...

6.5CVSS0.00261EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/18 1:18 p.m.25 views

CVE-2024-43346 WordPress Modal Window – create popup modal window plugin <= 6.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wow-Company Modal Window allows Stored XSS.This issue affects Modal Window: from n/a through 6.0.3...

6.5CVSS6.8AI score0.00261EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/18 1:18 p.m.67 views

CVE-2024-43346

CVE-2024-43346 is a stored XSS vulnerability in the WordPress plugin “Modal Window” from Wow-Company. The issue affects Modal Window versions from n/a up to 6.0.3 and, per the vulnerability entry, has been patched (no exploit details provided in the sources). The vulnerability involves improper n...

6.5CVSS6.5AI score0.00261EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/08/18 12:0 a.m.7 views

WordPress plugin Modal Window 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS6.1AI score0.00261EPSS
SaveExploits0References2
Rows per page
Query Builder