Lucene search
+L

1789 matches found

NVD
NVD
added 2023/05/25 12:15 p.m.22 views

CVE-2022-47136

Cross-Site Request Forgery CSRF vulnerability in WPManageNinja LLC Ninja Tables – Best Data Table Plugin for WordPress plugin = 4.3.4 versions...

8.8CVSS5.9AI score0.00271EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/05/25 11:45 a.m.10 views

CVE-2022-47136 WordPress Ninja Tables Plugin <= 4.3.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WPManageNinja LLC Ninja Tables – Best Data Table Plugin for WordPress plugin = 4.3.4 versions...

4.3CVSS9.1AI score0.00271EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/05/25 11:45 a.m.33 views

CVE-2022-47136 WordPress Ninja Tables Plugin <= 4.3.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WPManageNinja LLC Ninja Tables – Best Data Table Plugin for WordPress plugin = 4.3.4 versions...

4.3CVSS9.1AI score0.00271EPSS
SaveExploits0References1
CVE
CVE
added 2023/05/25 11:45 a.m.57 views

CVE-2022-47136

CVE-2022-47136 is a Cross-Site Request Forgery (CSRF) vulnerability in Ninja Tables for WordPress (WPManageNinja Ninja Tables) affecting versions up to 4.3.4. The issue is due to CSRF, with patch available in version 4.3.5. Exploitation status is not reported in the provided documents. Remediate ...

8.8CVSS6.6AI score0.00271EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/05/25 12:00 a.m.11 views

PT-2023-15181 · WordPress · Ninja Tables

Name of the Vulnerable Software and Affected Versions: Ninja Tables – Best Data Table Plugin for WordPress versions prior to 4.3.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

8.8CVSS8.9AI score0.00271EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/05/25 12:00 a.m.12 views

WordPress plugin Ninja Tables – Best Data Table 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS8.2AI score0.00271EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
added 2023/05/16 7:47 p.m.10 views

motionninja.ca Cross Site Scripting vulnerability OBB-3345558

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2023/05/16 12:00 a.m.36 views

WordPress Ninja Forms Contact Form Plugin < 3.6.22 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ninjaforms:contactform"; ifdescription...

6.1CVSS7AI score0.00925EPSS
SaveExploits2References1
OSV
OSV
added 2023/05/15 1:15 p.m.11 views

CVE-2023-1835

The Ninja Forms Contact Form WordPress plugin before 3.6.22 does not properly escape user input before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS6.8AI score0.00925EPSS
SaveExploits2References1
NVD
NVD
added 2023/05/15 1:15 p.m.41 views

CVE-2023-1835

The Ninja Forms Contact Form WordPress plugin before 3.6.22 does not properly escape user input before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS6AI score0.00925EPSS
SaveExploits2References1
Prion
Prion
added 2023/05/15 1:15 p.m.29 views

Cross site scripting

The Ninja Forms Contact Form WordPress plugin before 3.6.22 does not properly escape user input before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

5.8CVSS6AI score0.00925EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2023/05/15 12:15 p.m.50 views

CVE-2023-1835 Ninja Forms < 3.6.22 - Reflected XSS

The Ninja Forms Contact Form WordPress plugin before 3.6.22 does not properly escape user input before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.2AI score0.00925EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2023/05/15 12:15 p.m.15 views

CVE-2023-1835 Ninja Forms < 3.6.22 - Reflected XSS

The Ninja Forms Contact Form WordPress plugin before 3.6.22 does not properly escape user input before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6AI score0.00925EPSS
SaveExploits2References1
CVE
CVE
added 2023/05/15 12:15 p.m.122 views

CVE-2023-1835

The CVE-2023-1835 entry concerns the Ninja Forms Contact Form WordPress plugin prior to 3.6.22. The connected documents provide concrete details: the vulnerability is a Reflected Cross-Site Scripting caused by insufficient input sanitization and output escaping, exposed via the page parameter and...

6.1CVSS6.1AI score0.00925EPSS
SaveExploits2References1Affected Software1
CNNVD
CNNVD
added 2023/05/15 12:00 a.m.12 views

WordPress plugin Ninja Forms Contact Form 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.1CVSS6.8AI score0.00925EPSS
SaveExploits2References2
OSV
OSV
added 2023/05/10 11:15 a.m.14 views

CVE-2022-47137

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPManageNinja LLC Ninja Tables plugin = 4.3.4 versions...

4.8CVSS5.8AI score0.0042EPSS
SaveExploits0References1
NVD
NVD
added 2023/05/10 11:15 a.m.27 views

CVE-2022-47137

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPManageNinja LLC Ninja Tables plugin = 4.3.4 versions...

5.9CVSS5.4AI score0.0042EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/10 11:15 a.m.22 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPManageNinja LLC Ninja Tables plugin = 4.3.4 versions...

4.3CVSS4.8AI score0.0042EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/05/10 10:04 a.m.69 views

CVE-2022-47137

CVE-2022-47137 affects the Ninja Tables WordPress plugin (WPManageNinja Ninja Tables) up to version 4.3.4. The issue is an admin+ authenticated Stored XSS caused by insufficient sanitization/escaping of plugin settings. The vulnerability could allow an attacker with admin privileges to inject arb...

5.9CVSS5.1AI score0.0042EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/05/10 10:04 a.m.33 views

CVE-2022-47137 WordPress Ninja Tables Plugin <= 4.3.4 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPManageNinja LLC Ninja Tables plugin = 4.3.4 versions...

5.9CVSS5.5AI score0.0042EPSS
SaveExploits0References1
Rows per page
Query Builder