Lucene search
K

104 matches found

NVD
NVD
added 2020/02/24 7:15 p.m.10 views

CVE-2019-17228

includes/options.php in the motors-car-dealership-classified-listings aka Motors - Car Dealer & Classified Ads plugin through 1.4.0 for WordPress allows unauthenticated options changes...

6.5CVSS6.6AI score0.04121EPSS
Exploits1References3
OSV
OSV
added 2020/02/24 7:15 p.m.1 views

CVE-2019-17228

includes/options.php in the motors-car-dealership-classified-listings aka Motors - Car Dealer & Classified Ads plugin through 1.4.0 for WordPress allows unauthenticated options changes...

6.5CVSS6.6AI score0.04121EPSS
Exploits1References3
Cvelist
Cvelist
added 2020/02/24 6:25 p.m.15 views

CVE-2019-17228

includes/options.php in the motors-car-dealership-classified-listings aka Motors - Car Dealer & Classified Ads plugin through 1.4.0 for WordPress allows unauthenticated options changes...

6.7AI score0.04121EPSS
Exploits1References3
NVD
NVD
added 2019/09/08 11:15 p.m.22 views

CVE-2019-16118

Cross site scripting XSS in the photo-gallery 10Web Photo Gallery plugin before 1.5.35 for WordPress exists via admin/controllers/Options.php...

6.1CVSS6.2AI score0.02552EPSS
Exploits4References5
Prion
Prion
added 2019/09/08 11:15 p.m.21 views

Cross site scripting

Cross site scripting XSS in the photo-gallery 10Web Photo Gallery plugin before 1.5.35 for WordPress exists via admin/controllers/Options.php...

4.3CVSS6.1AI score0.02552EPSS
Exploits4References5Affected Software1
Cvelist
Cvelist
added 2019/09/08 10:49 p.m.27 views

CVE-2019-16118

Cross site scripting XSS in the photo-gallery 10Web Photo Gallery plugin before 1.5.35 for WordPress exists via admin/controllers/Options.php...

6.2AI score0.02552EPSS
Exploits4References5
Positive Technologies
Positive Technologies
added 2019/09/08 12:0 a.m.5 views

PT-2019-14522 · 10Web · 10Web Photo Gallery

Name of the Vulnerable Software and Affected Versions: 10Web Photo Gallery plugin versions prior to 1.5.35 Description: The issue exists due to cross site scripting XSS in the photo-gallery plugin. This can be exploited via the admin/controllers/Options.php endpoint. Recommendations: For versions...

6.1CVSS5.9AI score0.02552EPSS
Exploits4References8
OSV
OSV
added 2019/02/04 7:29 p.m.1 views

DEBIAN-CVE-2019-7345

Self - Stored Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, as the view 'options' options.php does no input validation for the WEBTITLE, HOMEURL, HOMECONTENT, or WEBCONSOLEBANNER value, allowing an attacker to execute HTML or JavaScript code. This relates to functions.php...

4.8CVSS8.1AI score0.00235EPSS
Exploits1References1
CVE
CVE
added 2019/02/04 7:0 p.m.71 views

CVE-2019-7345

ZoneMinder

4.8CVSS5.1AI score0.00235EPSS
Exploits1References1Affected Software1
CNVD
CNVD
added 2018/01/17 12:0 a.m.1 views

WordPress WPGlobus plugin cross-site scripting vulnerability (CNVD-2018-01276)

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site.WPGlobus plugin is used in one of the plugin used to create a multi-language blog. A cross-site scripting vulnerabili...

4.8CVSS6.1AI score0.0031EPSS
Exploits1References1
CNVD
CNVD
added 2018/01/17 12:0 a.m.1 views

WordPress WPGlobus plugin cross-site scripting vulnerability (CNVD-2018-01287)

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site.WPGlobus plugin is used in one of the plugin used to create a multi-language blog. A cross-site scripting vulnerabili...

4.8CVSS6.2AI score0.0031EPSS
Exploits1References1
CNVD
CNVD
added 2018/01/17 12:0 a.m.1 views

WordPress WPGlobus plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site.WPGlobus plugin is used in one of the plugin used to create a multi-language blog. A cross-site scripting vulnerabili...

4.8CVSS6.1AI score0.00413EPSS
Exploits1References1
NVD
NVD
added 2018/01/12 9:29 a.m.12 views

CVE-2018-5367

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionposttypepost parameter to wp-admin/options.php...

4.8CVSS5AI score0.00421EPSS
Exploits1References2
OSV
OSV
added 2018/01/12 9:29 a.m.10 views

CVE-2018-5364

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionbrowserredirectredirectbylanguage parameter to wp-admin/options.php...

4.8CVSS6AI score
Exploits0References2
OSV
OSV
added 2018/01/12 9:29 a.m.8 views

CVE-2018-5367

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionposttypepost parameter to wp-admin/options.php...

4.8CVSS6AI score
Exploits0References2
OSV
OSV
added 2018/01/12 9:29 a.m.14 views

CVE-2018-5363

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionenabledlanguagesen or wpglobusoptionenabledlanguagesfr or any other language parameter to wp-admin/options.php...

4.8CVSS6AI score
Exploits0References2
NVD
NVD
added 2018/01/12 9:29 a.m.6 views

CVE-2018-5364

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionbrowserredirectredirectbylanguage parameter to wp-admin/options.php...

4.8CVSS5AI score0.00413EPSS
Exploits1References2
NVD
NVD
added 2018/01/12 9:29 a.m.13 views

CVE-2018-5366

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionmorelanguages parameter to wp-admin/options.php...

4.8CVSS5AI score0.0031EPSS
Exploits1References2
OSV
OSV
added 2018/01/12 9:29 a.m.10 views

CVE-2018-5362

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionposttypepage parameter to wp-admin/options.php...

4.8CVSS6AI score0.00413EPSS
Exploits1References2
NVD
NVD
added 2018/01/12 9:29 a.m.12 views

CVE-2018-5365

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionselectorwplistpagesshowselector parameter to wp-admin/options.php...

4.8CVSS5AI score0.0031EPSS
Exploits1References2
Rows per page
Query Builder