Lucene search
+L

856 matches found

OSV
OSV
added 2025/05/07 3:16 p.m.8 views

CVE-2025-47630

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Darren Cooney Ajax Load More allows Stored XSS. This issue affects Ajax Load More: from n/a through 7.3.1...

5.4CVSS5.8AI score0.00246EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/05/07 3:07 p.m.12 views

WordPress Ajax Load More plugin <= 7.3.1.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Ajax Load More versions = 7.3.1.2...

6.5CVSS7AI score0.00246EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/07 2:20 p.m.10 views

CVE-2025-47630 WordPress Ajax Load More <= 7.3.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Darren Cooney Ajax Load More allows Stored XSS. This issue affects Ajax Load More: from n/a through 7.3.1...

6.5CVSS6.4AI score0.00246EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/07 2:20 p.m.28 views

CVE-2025-47630 WordPress Ajax Load More plugin <= 7.3.1.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Darren Cooney Ajax Load More ajax-load-more allows Stored XSS.This issue affects Ajax Load More: from n/a through = 7.3.1.2...

6.5CVSS0.00246EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/07 2:20 p.m.71 views

CVE-2025-47630

CVE-2025-47630 : Stored XSS in the WordPress Ajax Load More plugin caused by improper input neutralization during page generation. Affected: versions up to 7.3.1; fix released in 7.3.1.2 (PatchStack), with corroboration from NVD/CVE listings. Exploitation status not specified in the provided docu...

6.5CVSS7.2AI score0.00246EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/05/07 12:00 a.m.9 views

WordPress plugin Ajax Load More 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Ajax Load More plugin, which stems from the application's lack of effective filtering and escaping of user-supplied...

6.5CVSS6.2AI score0.00246EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/07 12:00 a.m.10 views

PT-2025-20195 · Unknown · Ajax Load More

Name of the Vulnerable Software and Affected Versions: Ajax Load More versions through 7.3.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This enables an attacker to inject malicious...

6.5CVSS6.7AI score0.00246EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/04/11 5:05 p.m.27 views

CVE-2025-31394

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kailey trepmal More Mime Type Filters more-mime-type-filters allows Stored XSS.This issue affects More Mime Type Filters: from n/a through = 0.3...

7.1CVSS7.2AI score0.00401EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/09 5:15 p.m.10 views

CVE-2025-31394

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kailey trepmal More Mime Type Filters more-mime-type-filters allows Stored XSS.This issue affects More Mime Type Filters: from n/a through = 0.3...

7.1CVSS0.00401EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/09 4:10 p.m.39 views

CVE-2025-31394 WordPress More Mime Type Filters plugin <= 0.3 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kailey trepmal More Mime Type Filters more-mime-type-filters allows Stored XSS.This issue affects More Mime Type Filters: from n/a through = 0.3...

7.1CVSS0.00401EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/09 4:10 p.m.9 views

CVE-2025-31394 WordPress More Mime Type Filters plugin <= 0.3 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kailey trepmal More Mime Type Filters allows Stored XSS. This issue affects More Mime Type Filters: from n/a through 0.3...

7.1CVSS6.9AI score0.00401EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/05 1:44 a.m.23 views

CVE-2025-0810 Read More & Accordion <= 3.4.7 - Cross-Site Request Forgery to Local File Inclusion

The Read More & Accordion plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.4.7. This is due to missing or incorrect nonce validation on the addNewButtons function. This makes it possible for unauthenticated attackers to include and execute...

7.5CVSS0.00216EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/04/05 12:00 a.m.6 views

WordPress plugin Read More & Accordion 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

7.5CVSS7.8AI score0.00216EPSS
SaveExploits0References5
NVD
NVD
added 2025/04/04 2:15 a.m.11 views

CVE-2025-24310

Improper restriction of rendered UI layers or frames issue exists in HMI ViewJet C-more series, which may allow a remote unauthenticated attacker to trick the product user to perform operations on the product's web pages...

4.3CVSS0.00331EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/04/04 2:10 a.m.24 views

CVE-2025-25061

Unintended proxy or intermediary 'Confused Deputy' issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to use the product as an intermediary for FTP bounce attack...

5.8CVSS0.00429EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/04/04 2:10 a.m.10 views

CVE-2025-25061

Unintended proxy or intermediary 'Confused Deputy' issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to use the product as an intermediary for FTP bounce attack...

5.8CVSS7.3AI score0.00429EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/04/04 12:00 a.m.17 views

JTEKT ELECTRONICS HMI ViewJet C-more 安全漏洞

JTEKT ELECTRONICS HMI ViewJet C-more is a series of human-machine interfaces from JTEKT ELECTRONICS, Japan. A security vulnerability exists in JTEKT ELECTRONICS HMI ViewJet C-more that stems from a proxy issue that could lead to an FTP bounce attack...

5.8CVSS5.8AI score0.00429EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/04/04 12:00 a.m.10 views

JTEKT ELECTRONICS HMI ViewJet C-more 安全漏洞

JTEKT ELECTRONICS HMI ViewJet C-more is a series of human-machine interfaces from JTEKT ELECTRONICS, Japan. A security vulnerability exists in JTEKT ELECTRONICS HMI ViewJet C-more, which stems from an improper restriction at the UI layer that could lead to spoofing attacks...

4.3CVSS4.8AI score0.00331EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:00 a.m.14 views

The vulnerability of the microprogrammed software for ViewJet C-more Series sensor panels, which stems from the use of weak encryption algorithms, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the microprogrammed software for ViewJet C-more Series sensor panels is related to the use of weak encryption algorithms. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

6.5CVSS6.7AI score0.00164EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/04/04 12:00 a.m.12 views

JTEKT ELECTRONICS HMI ViewJet C-more 安全漏洞

JTEKT ELECTRONICS HMI ViewJet C-more is a series of human-machine interfaces from JTEKT ELECTRONICS, Japan. A security vulnerability exists in JTEKT ELECTRONICS HMI ViewJet C-more, which stems from an unrestricted resource allocation and could lead to a denial of service...

5.3CVSS5.4AI score0.00575EPSS
SaveExploits0References3
Rows per page
Query Builder