Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 10:34 a.m.7 views

CVE-2017-18882

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS can occur via OpenGraph data...

6.1CVSS6.1AI score0.00359EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-8262

Malware in sbrugna...

6.1CVSS6.3AI score0.00318EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-9972

Malware in sbrugna...

6.1CVSS6.3AI score0.00359EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-57647

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00118EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:6 a.m.4 views

CVE-2023-5330

Mattermost fails to enforce a limit for the size of the cache entry for OpenGraph data allowing an attacker to send a specially crafted request to the /api/v4/opengraph filling the cache and turning the server unavailable...

7.5CVSS6.8AI score0.00118EPSS
Exploits0References1
Patchstack
Patchstack
added 2017/12/04 12:0 a.m.9 views

WordPress Content Cards Plugin <= 0.9.6 - Cross-Site Scripting vulnerability

A cross site scripting vulnerability was found in WordPress Content Cards plugin in 0.9.6 version. This vulnerability is related to OpenGraph Data Handler functionality. The data is not sanitized properly and it leads to a cross site scripting vulnerability. Solution Update the plugin...

1.6AI score
Exploits0References2Affected Software1
Prion
Prion
added 2017/12/03 7:29 p.m.9 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Content Cards plugin before 0.9.7 for WordPress allows remote attackers to inject arbitrary JavaScript via crafted OpenGraph data...

4.3CVSS6.1AI score0.00318EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2017/12/03 7:29 p.m.6 views

CVE-2017-17096

Cross-site scripting XSS vulnerability in the Content Cards plugin before 0.9.7 for WordPress allows remote attackers to inject arbitrary JavaScript via crafted OpenGraph data...

6.1CVSS6.2AI score0.00318EPSS
Exploits0References2
Cvelist
Cvelist
added 2017/12/03 7:0 p.m.10 views

CVE-2017-17096

Cross-site scripting XSS vulnerability in the Content Cards plugin before 0.9.7 for WordPress allows remote attackers to inject arbitrary JavaScript via crafted OpenGraph data...

6.2AI score0.00318EPSS
Exploits0References2
Rows per page
Query Builder