Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

1385 matches found

Prion
Prion•added 2023/09/27 3:19 p.m.•26 views

Cross site scripting

The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 3.1.37.1 due to insufficient input sanitization and output escaping. This makes it possible f...

4.3CVSS4.8AI score0.0051EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment•added 2023/09/27 3:03 a.m.•10 views

CVE-2023-4423 WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.37.1 - Authenticated (Admin+) Stored Cross-Site Scripting

The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 3.1.37.1 due to insufficient input sanitization and output escaping. This makes it possible f...

4.4CVSS6.5AI score0.0051EPSS
SaveExploits1References4
Cvelist
Cvelist•added 2023/09/27 3:03 a.m.•33 views

CVE-2023-4423 WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.37.1 - Authenticated (Admin+) Stored Cross-Site Scripting

The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 3.1.37.1 due to insufficient input sanitization and output escaping. This makes it possible f...

4.4CVSS4.9AI score0.0051EPSS
SaveExploits1References4
OSV
OSV•added 2023/09/27 3:03 a.m.•21 views

CVE-2023-4423 WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.37.1 - Authenticated (Admin+) Stored Cross-Site Scripting

The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 3.1.37.1 due to insufficient input sanitization and output escaping. This makes it possible f...

4.4CVSS6.5AI score
SaveExploits0References6
WPVulnDB
WPVulnDB•added 2023/09/27 12:00 a.m.•20 views

WP Event Manager < 3.1.38 - Admin+ Stored XSS

Description The plugin does not adequately sanitize and escape input in the admin settings. This flaw could lead to stored cross-site scripting attacks, specifically in multi-site installations or where unfilteredhtml has been disabled...

4.8CVSS5.5AI score0.0051EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies•added 2023/09/27 12:00 a.m.•11 views

PT-2023-29154 · WordPress · Wp Event Manager

Name of the Vulnerable Software and Affected Versions: The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress versions up to, and including, 3.1.37.1 Description: The issue is related to Stored Cross-Site Scripting via admin settings due to...

4.8CVSS5.1AI score0.0051EPSS
SaveExploits1References8
Prion
Prion•added 2023/09/11 8:15 p.m.•28 views

Cross site scripting

The tagDiv Composer WordPress plugin before 4.2, used as a companion by the Newspaper and Newsmag themes from tagDiv, does not validate and escape some settings, which could allow users with Admin privileges to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is...

4.3CVSS4.8AI score0.00436EPSS
SaveExploits2References1Affected Software1
OSV
OSV•added 2023/09/05 3:15 a.m.•6 views

CVE-2023-4636

The WordPress File Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

4.8CVSS5.9AI score0.0088EPSS
SaveExploits2References3
NVD
NVD•added 2023/09/05 3:15 a.m.•40 views

CVE-2023-4636

The WordPress File Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

4.8CVSS4.3AI score0.0088EPSS
SaveExploits2References3
Prion
Prion•added 2023/09/05 3:15 a.m.•21 views

Cross site scripting

The WordPress File Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

4.3CVSS4.8AI score0.0088EPSS
SaveExploits2References3Affected Software1
Vulnrichment
Vulnrichment•added 2023/09/05 2:25 a.m.•10 views

CVE-2023-4636

The WordPress File Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

4.4CVSS4.7AI score0.0088EPSS
SaveExploits2References3
Cvelist
Cvelist•added 2023/09/05 2:25 a.m.•43 views

CVE-2023-4636 WordPress File Sharing Plugin <= 2.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting

The WordPress File Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

4.4CVSS4.9AI score0.0088EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies•added 2023/09/04 12:00 a.m.•11 views

PT-2023-29979 · WordPress · Wordpress File Sharing Plugin

Name of the Vulnerable Software and Affected Versions: WordPress File Sharing Plugin versions up to, and including, 2.0.3 Description: The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient input sanitization and output escaping. This allows authenticated...

4.8CVSS5.3AI score0.0088EPSS
SaveExploits2References8
NVD
NVD•added 2023/08/31 6:15 a.m.•27 views

CVE-2023-4500

The Order Tracking Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the order status parameter in versions up to, and including, 3.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers admin or higher to inject...

4.8CVSS4.4AI score0.003EPSS
SaveExploits0References2
NVD
NVD•added 2023/08/31 6:15 a.m.•25 views

CVE-2023-4160

The WooCommerce PDF Invoice Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.2.90 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-leve...

4.8CVSS4.4AI score0.00496EPSS
SaveExploits0References3
Prion
Prion•added 2023/08/31 6:15 a.m.•23 views

Cross site scripting

The WooCommerce PDF Invoice Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.2.90 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-leve...

4.3CVSS4.8AI score0.00496EPSS
SaveExploits0References3Affected Software1
Prion
Prion•added 2023/08/31 6:15 a.m.•22 views

Cross site scripting

The Order Tracking Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the order status parameter in versions up to, and including, 3.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers admin or higher to inject...

4.3CVSS4.8AI score0.003EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist•added 2023/08/31 5:33 a.m.•35 views

CVE-2023-4500 Order Tracking Pro <= 3.3.6 - Authenticated (Administrator+) Stored Cross-Site Scripting

The Order Tracking Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the order status parameter in versions up to, and including, 3.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers admin or higher to inject...

4.7CVSS4.9AI score0.003EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2023/08/31 5:33 a.m.•32 views

CVE-2023-4160 WooCommerce PDF Invoice Builder <= 1.2.90 - Authenticated (Administrator+) Cross-Site Scripting

The WooCommerce PDF Invoice Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.2.90 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-leve...

4.4CVSS4.9AI score0.00496EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment•added 2023/08/31 5:33 a.m.•10 views

CVE-2023-4160 WooCommerce PDF Invoice Builder <= 1.2.90 - Authenticated (Administrator+) Cross-Site Scripting

The WooCommerce PDF Invoice Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.2.90 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-leve...

4.4CVSS6.7AI score0.00496EPSS
SaveExploits0References3
Rows per page
Query Builder