Lucene search
+L

3 matches found

Cvelist
Cvelist
•added 2025/06/20 2:31 a.m.•31 views

CVE-2025-6301 PHPGurukul Notice Board System Add Notice manage-notices.php cross site scripting

A vulnerability, which was classified as problematic, has been found in PHPGurukul Notice Board System 1.0. This issue affects some unknown processing of the file /admin/manage-notices.php of the component Add Notice. The manipulation of the argument Title/Description leads to cross site scriptin...

4.8CVSS0.00264EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/10 12:00 a.m.•8 views

CVE-2021-38328: Improper Neutralization of Input During Web Page Generation

The Notices WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /notices.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 6.1...

6.1CVSS5.8AI score0.00895EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/09/10 12:00 a.m.•2 views

PT-2021-22046

Name of the Vulnerable Software and Affected Versions: Notices WordPress plugin versions up to and including 6.1 Description: The issue concerns a Reflected Cross-Site Scripting vulnerability. It is caused by a reflected $ SERVER"PHP SELF" value in the /notices.php file, allowing attackers to...

6.1CVSS0.00895EPSS
SaveExploits1References5
Rows per page
Query Builder