Lucene search
+L

27 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-11103

Malicious code in bioql PyPI...

6.5CVSS7.9AI score0.00222EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2024-50988

Malicious code in bioql PyPI...

6.4CVSS8.7AI score0.00349EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•25 views

EUVD-2025-9142

Malicious code in bioql PyPI...

4.3CVSS7.9AI score0.00252EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/23 7:06 a.m.•23 views

CVE-2024-12598

The MyBookProgress by Stormhill Media plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘book’ parameter in all versions up to, and including, 1.0.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS5.8AI score0.00349EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/17 11:33 p.m.•43 views

CVE-2025-30982

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zookatron MyBookProgress by Stormhill Media mybookprogress allows Stored XSS.This issue affects MyBookProgress by Stormhill Media: from n/a through = 1.0.8...

6.5CVSS8.6AI score0.00222EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/15 10:15 p.m.•43 views

CVE-2025-30982

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zookatron MyBookProgress by Stormhill Media mybookprogress allows Stored XSS.This issue affects MyBookProgress by Stormhill Media: from n/a through = 1.0.8...

6.5CVSS0.00222EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/15 9:53 p.m.•74 views

CVE-2025-30982

CVE-2025-30982 is a stored XSS in WordPress plugin MyBookProgress by Stormhill Media (affected: MyBookProgress

6.5CVSS8.4AI score0.00222EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/15 9:53 p.m.•55 views

CVE-2025-30982 WordPress MyBookProgress by Stormhill Media plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zookatron MyBookProgress by Stormhill Media mybookprogress allows Stored XSS.This issue affects MyBookProgress by Stormhill Media: from n/a through = 1.0.8...

6.5CVSS0.00222EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/15 9:53 p.m.•11 views

CVE-2025-30982 WordPress MyBookProgress by Stormhill Media plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zookatron MyBookProgress by Stormhill Media mybookprogress allows Stored XSS.This issue affects MyBookProgress by Stormhill Media: from n/a through = 1.0.8...

6.5CVSS8.4AI score0.00222EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/15 12:00 a.m.•9 views

CVE-2025-30982: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zookatron MyBookProgress by Stormhill Media mybookprogress allows Stored XSS.This issue affects MyBookProgress by Stormhill Media: from n/a through = 1.0.8...

6.5CVSS8.6AI score0.00222EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/15 12:00 a.m.•20 views

WordPress plugin MyBookProgress by Stormhill Media has a cross-site scripting vulnerability.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.5CVSS8AI score0.00222EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/04/15 12:00 a.m.•12 views

PT-2025-16537

Name of the Vulnerable Software and Affected Versions MyBookProgress by Stormhill Media versions 1.0.8 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can...

6.5CVSS5.8AI score0.00222EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/04/03 3:44 p.m.•26 views

CVE-2025-31887

Missing Authorization vulnerability in zookatron MyBookProgress by Stormhill Media mybookprogress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MyBookProgress by Stormhill Media: from n/a through = 1.0.8...

4.3CVSS8.7AI score0.00252EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/04/03 8:53 a.m.•19 views

WordPress MyBookProgress by Stormhill Media plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin MyBookProgress by Stormhill Media versions = 1.0.8...

6.5CVSS8.4AI score0.00222EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/04/01 3:16 p.m.•56 views

CVE-2025-31887

Missing Authorization vulnerability in zookatron MyBookProgress by Stormhill Media mybookprogress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MyBookProgress by Stormhill Media: from n/a through = 1.0.8...

4.3CVSS0.00252EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/01 2:52 p.m.•11 views

CVE-2025-31887 WordPress MyBookProgress plugin <= 1.0.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in zookatron MyBookProgress by Stormhill Media allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MyBookProgress by Stormhill Media: from n/a through 1.0.8...

4.3CVSS8.6AI score0.00252EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/01 12:00 a.m.•8 views

CVE-2025-31887: Missing Authorization

Missing Authorization vulnerability in zookatron MyBookProgress by Stormhill Media mybookprogress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MyBookProgress by Stormhill Media: from n/a through = 1.0.8...

4.3CVSS8.7AI score0.00252EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•38 views

WordPress plugin MyBookProgress by Stormhill Media has security vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

4.3CVSS8.3AI score0.00252EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/04/01 12:00 a.m.•7 views

PT-2025-14263

Name of the Vulnerable Software and Affected Versions MyBookProgress by Stormhill Media versions 1.0.8 and earlier Description The issue is related to Missing Authorization, allowing exploitation of incorrectly configured access control security levels. Recommendations For MyBookProgress by...

4.3CVSS8.4AI score0.00252EPSS
SaveExploits0References5
NVD
NVD
•added 2025/01/17 7:15 a.m.•39 views

CVE-2024-12598

The MyBookProgress by Stormhill Media plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘book’ parameter in all versions up to, and including, 1.0.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.00349EPSS
SaveExploits0References2
Rows per page
Query Builder