Lucene search
K

11 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-25669

Malware in sbrugna...

6.1CVSS6.2AI score0.0021EPSS
Exploits0References3
CNVD
CNVD
added 2021/12/19 12:0 a.m.15 views

WordPress WooCommerce myghpay Payment Gateway plugin cross-site scripting vulnerability

The WooCommerce myghpay Payment Gateway plugin is a WordPress open source application plugin. cross-site scripting vulnerability exists in the WordPress WooCommerce myghpay Payment Gateway plugin, which stems from /processresponse. php's clientref parameter lacks a data validation filter for...

6.1CVSS1.5AI score0.0021EPSS
Exploits0References1
OSV
OSV
added 2021/12/14 4:15 p.m.1 views

CVE-2021-39308

The WooCommerce myghpay Payment Gateway WordPess plugin is vulnerable to Reflected Cross-Site Scripting via the clientref parameter found in the /processresponse.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.0...

6.1CVSS5.8AI score0.0021EPSS
Exploits0References2
NVD
NVD
added 2021/12/14 4:15 p.m.6 views

CVE-2021-39308

The WooCommerce myghpay Payment Gateway WordPess plugin is vulnerable to Reflected Cross-Site Scripting via the clientref parameter found in the /processresponse.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.0...

6.1CVSS0.0021EPSS
Exploits0References2
Prion
Prion
added 2021/12/14 4:15 p.m.16 views

Cross site scripting

The WooCommerce myghpay Payment Gateway WordPess plugin is vulnerable to Reflected Cross-Site Scripting via the clientref parameter found in the /processresponse.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.0...

4.3CVSS6.1AI score0.0021EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2021/12/14 3:50 p.m.6 views

CVE-2021-39308 WooCommerce myghpay Payment Gateway <= 3.0 Reflected Cross-Site Scripting

The WooCommerce myghpay Payment Gateway WordPess plugin is vulnerable to Reflected Cross-Site Scripting via the clientref parameter found in the /processresponse.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.0...

6.1CVSS6AI score0.0021EPSS
Exploits0References2
Cvelist
Cvelist
added 2021/12/14 3:50 p.m.12 views

CVE-2021-39308 WooCommerce myghpay Payment Gateway <= 3.0 Reflected Cross-Site Scripting

The WooCommerce myghpay Payment Gateway WordPess plugin is vulnerable to Reflected Cross-Site Scripting via the clientref parameter found in the /processresponse.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.0...

6.1CVSS6.2AI score0.0021EPSS
Exploits0References2
CVE
CVE
added 2021/12/14 3:50 p.m.35 views

CVE-2021-39308

Vulnerability summary (CVE-2021-39308) : The WordPress plugin “WooCommerce myghpay Payment Gateway” is vulnerable to Reflected Cross-Site Scripting via the clientref parameter in ~/processresponse.php, affecting versions up to 3.0. The issue can allow injection of arbitrary JavaScript in the clie...

6.1CVSS6AI score0.0021EPSS
Exploits0References2Affected Software1
WPVulnDB
WPVulnDB
added 2021/12/14 12:0 a.m.18 views

WooCommerce myghpay Payment Gateway <= 3.0 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the clientref parameter found in the /processresponse.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.0...

6.1CVSS5AI score0.0021EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2021/12/14 12:0 a.m.1 views

WordPress 插件跨站脚本漏洞

The WooCommerce myghpay Payment Gateway plugin is a WordPress open source application plugin. cross-site scripting vulnerability exists in the WordPress WooCommerce myghpay Payment Gateway plugin, which stems from /processresponse. php's clientref parameter lacks a data validation filter for...

6.1CVSS5.6AI score0.0021EPSS
Exploits0References3
Patchstack
Patchstack
added 2021/12/14 12:0 a.m.15 views

WordPress myghpay WooCommerce Payment Gateway plugin <= 3.0 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by p7e4 in WordPress myghpay WooCommerce Payment Gateway plugin versions = 3.0. Solution Deactivate and delete. This plugin has been closed as of December 13, 2021 and is not available for download. This closure is temporary, pending a...

6.1CVSS2.4AI score0.0021EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder