Lucene search
K

37 matches found

RedhatCVE
RedhatCVE
added 2026/01/23 9:16 p.m.3 views

CVE-2025-68041

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codisto Omnichannel for WooCommerce codistoconnect allows Stored XSS.This issue affects Omnichannel for WooCommerce: from n/a through = 1.3.65...

7.1CVSS5.4AI score0.00175EPSS
Exploits0References1
NVD
NVD
added 2026/01/22 5:16 p.m.3 views

CVE-2025-68041

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codisto Omnichannel for WooCommerce codistoconnect allows Stored XSS.This issue affects Omnichannel for WooCommerce: from n/a through = 1.3.65...

7.1CVSS0.00175EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:52 p.m.1 views

CVE-2025-68041

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codisto Omnichannel for WooCommerce codistoconnect allows Stored XSS.This issue affects Omnichannel for WooCommerce: from n/a through = 1.3.65...

7.1CVSS5.3AI score0.00175EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/01/22 4:52 p.m.1 views

CVE-2025-68041 WordPress Omnichannel for WooCommerce plugin <= 1.3.65 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codisto Omnichannel for WooCommerce codistoconnect allows Stored XSS.This issue affects Omnichannel for WooCommerce: from n/a through = 1.3.65...

5.9AI score0.00175EPSS
Exploits0References1
CVE
CVE
added 2026/01/22 4:52 p.m.8 views

CVE-2025-68041

CVE-2025-68041 affects Codisto Omnichannel for WooCommerce (codistoconnect) &lt;= 1.3.65. Description: Stored XSS due to improper input neutralization during web page generation. Connected sources confirm the issue exists and affects Omnichannel for WooCommerce: from n/a through

7.1CVSS5.4AI score0.00175EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/22 4:52 p.m.17 views

CVE-2025-68041 WordPress Omnichannel for WooCommerce plugin <= 1.3.65 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codisto Omnichannel for WooCommerce codistoconnect allows Stored XSS.This issue affects Omnichannel for WooCommerce: from n/a through = 1.3.65...

7.1CVSS0.00175EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/22 12:0 a.m.7 views

WordPress plugin Omnichannel for WooCommerce has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

7.1CVSS5.6AI score0.00175EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/01/22 12:0 a.m.6 views

PT-2026-4069

Name of the Vulnerable Software and Affected Versions codisto Omnichannel for WooCommerce versions through 1.3.65 Description The software contains a flaw related to improper input handling during web page creation, specifically a Stored Cross-site Scripting issue. This allows for the injection o...

5.3AI score0.00175EPSS
Exploits0References3
Patchstack
Patchstack
added 2026/01/15 11:59 a.m.5 views

WordPress Omnichannel for WooCommerce plugin <= 1.3.65 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by guardimo in WordPress Plugin Omnichannel for WooCommerce versions = 1.3.65...

7.1CVSS6.1AI score0.00175EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2025/12/31 12:0 a.m.5 views

WordPress Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart Integration - Powered by Codisto plugin <= 1.3.65 - Unauthenticated Stored Cross-Site Scripting vulnerability

WordPress Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart Integration - Powered by Codisto plugin = 1.3.65 - Unauthenticated Stored Cross-Site Scripting vulnerability discovered by shark3y in WordPress Plugin Omnichannel for WooCommerce versions = 1.3.65...

7.2CVSS5.4AI score0.00246EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/12/04 4:29 a.m.24 views

CVE-2025-11727 Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart Integration - Powered by Codisto <= 1.3.65 - Unauthenticated Stored Cross-Site Scripting

The Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart Integration – Powered by Codisto plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sync function in all versions up to, and including, 1.3.65 due to insufficient input sanitization and output escaping. This...

7.2CVSS0.00246EPSS
Exploits0References6
EUVD
EUVD
added 2025/12/04 4:29 a.m.4 views

EUVD-2025-201140

The Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart Integration – Powered by Codisto plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sync function in all versions up to, and including, 1.3.65 due to insufficient input sanitization and output escaping. This...

7.2CVSS4.8AI score0.00246EPSS
Exploits0References7
EUVD
EUVD
added 2025/11/21 12:30 a.m.3 views

EUVD-2025-198372

Improper authorization in Dynamics OmniChannel SDK Storage Containers allows an unauthorized attacker to elevate privileges over a network...

8.8CVSS6.3AI score0.00415EPSS
Exploits0References2
NVD
NVD
added 2025/11/20 11:15 p.m.19 views

CVE-2025-64655

Improper authorization in Dynamics OmniChannel SDK Storage Containers allows an unauthorized attacker to elevate privileges over a network...

9.8CVSS0.00415EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2025/11/20 10:18 p.m.2 views

CVE-2025-64655

Improper authorization in Dynamics OmniChannel SDK Storage Containers allows an unauthorized attacker to elevate privileges over a network...

9.8CVSS5.5AI score0.00415EPSS
Exploits0References2
CVE
CVE
added 2025/11/20 10:18 p.m.21 views

CVE-2025-64655

CVE-2025-64655 : Multiple sources corroborate an improper authorization vulnerability in the Dynamics OmniChannel SDK Storage Containers that could allow network-based privilege elevation. Affected product is the Dynamics OmniChannel SDK Storage Containers; root cause is improper authorization le...

9.8CVSS6.4AI score0.00415EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/20 10:18 p.m.8 views

CVE-2025-64655 Dynamics OmniChannel SDK Storage Containers Elevation of Privilege Vulnerability

...

8.8CVSS6.6AI score0.00415EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2025/11/20 8:0 a.m.16 views

Dynamics OmniChannel SDK Storage Containers Elevation of Privilege Vulnerability

Improper authorization in Dynamics OmniChannel SDK Storage Containers allows an unauthorized attacker to elevate privileges over a network...

9.8CVSS6.9AI score0.00415EPSS
Exploits0
CNNVD
CNNVD
added 2025/11/20 12:0 a.m.8 views

Microsoft Dynamics OmniChannel SDK Storage Containers 授权问题漏洞

Microsoft Dynamics OmniChannel SDK Storage Containers is a container for storing, accessing, or managing records from Microsoft Corporation, USA. An authorization issue vulnerability exists in Microsoft Dynamics OmniChannel SDK Storage Containers that stems from improper authorization and could...

9.8CVSS6.5AI score0.00415EPSS
Exploits0References1
Kaspersky
Kaspersky
added 2025/11/20 12:0 a.m.5 views

KLA90451 PE vulnerability in Microsoft Dynamics

An elevation of privilege vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-64655 Related products Dynamics-OmniChannel-SDK CVE list CVE-2025-64655 critical Solution Install necessary updates from the KB...

9.8CVSS7AI score0.00415EPSS
Exploits0References3
Rows per page
Query Builder