Lucene search
+L

8397 matches found

NVD
NVD
added 2026/01/23 3:16 p.m.10 views

CVE-2026-24526

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Steve Truman Email Inquiry & Cart Options for WooCommerce woocommerce-email-inquiry-cart-options allows DOM-Based XSS.This issue affects Email Inquiry & Cart Options for WooCommerce: from n/a throu...

6.5CVSS0.00206EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/23 2:28 p.m.7 views

CVE-2026-24526

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Steve Truman Email Inquiry & Cart Options for WooCommerce woocommerce-email-inquiry-cart-options allows DOM-Based XSS.This issue affects Email Inquiry & Cart Options for WooCommerce: from n/a throu...

6.5CVSS5.9AI score0.00206EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/01/23 2:28 p.m.5 views

CVE-2026-24526 WordPress Email Inquiry & Cart Options for WooCommerce plugin <= 3.4.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Steve Truman Email Inquiry & Cart Options for WooCommerce woocommerce-email-inquiry-cart-options allows DOM-Based XSS.This issue affects Email Inquiry & Cart Options for WooCommerce: from n/a throu...

6.5CVSS5.8AI score0.00206EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/23 2:28 p.m.37 views

CVE-2026-24526 WordPress Email Inquiry & Cart Options for WooCommerce plugin <= 3.4.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Steve Truman Email Inquiry & Cart Options for WooCommerce woocommerce-email-inquiry-cart-options allows DOM-Based XSS.This issue affects Email Inquiry & Cart Options for WooCommerce: from n/a throu...

6.5CVSS0.00206EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/23 2:28 p.m.19 views

CVE-2026-24526

CVE-2026-24526 affects the WordPress plugin Email Inquiry & Cart Options for WooCommerce (woocommerce-email-inquiry-cart-options) up to version 3.4.3. The issue is a DOM-Based XSS due to improper input handling during web page generation. Exploitation details are not provided in the initial docum...

6.5CVSS5.2AI score0.00206EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/23 6:19 a.m.13 views

CVE-2026-23962

Mastodon is a free, open-source social network server based on ActivityPub. Mastodon versions before v4.3.18, v4.4.12, and v4.5.5 do not have a limit on the maximum number of poll options for remote posts, allowing attackers to create polls with a very large amount of options, greatly increasing...

7.5CVSS5.7AI score0.00506EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/23 12:00 a.m.14 views

WordPress plugin: Email Inquiry & Cart Options for WooCommerce – Cross-site Script Vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

6.5CVSS5.6AI score0.00206EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/23 12:00 a.m.10 views

PT-2026-4376

Name of the Vulnerable Software and Affected Versions Steve Truman Email Inquiry & Cart Options for WooCommerce versions through 3.4.3 Description The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-site Scripting issue. This...

5.4AI score0.00206EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/23 12:00 a.m.7 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: curl (UTSA-2026-004928)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004928 advisory. When doing multi-threaded LDAPS transfers LDAP over TLS with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore...

6.3CVSS5.6AI score0.00108EPSS
SaveExploits0References3
NVD
NVD
added 2026/01/22 5:16 p.m.8 views

CVE-2025-68839

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Remi Corson Easy Theme Options easy-theme-options allows Reflected XSS.This issue affects Easy Theme Options: from n/a through = 1.0...

7.1CVSS0.00182EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:52 p.m.2 views

CVE-2025-68839

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Remi Corson Easy Theme Options easy-theme-options allows Reflected XSS.This issue affects Easy Theme Options: from n/a through = 1.0...

7.1CVSS5.3AI score0.00182EPSS
SaveExploits0References2
CVE
CVE
added 2026/01/22 4:52 p.m.14 views

CVE-2025-68839

CVE-2025-68839 is a WordPress plugin vulnerability in the Easy Theme Options plugin (Remi Corson) causing a Reflected XSS during web page generation. Affected versions are reported as

7.1CVSS5.4AI score0.00182EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/22 4:52 p.m.24 views

CVE-2025-68839 WordPress Easy Theme Options plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Remi Corson Easy Theme Options easy-theme-options allows Reflected XSS.This issue affects Easy Theme Options: from n/a through = 1.0...

7.1CVSS0.00182EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/22 4:52 p.m.2 views

CVE-2025-68839 WordPress Easy Theme Options plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Remi Corson Easy Theme Options easy-theme-options allows Reflected XSS.This issue affects Easy Theme Options: from n/a through = 1.0...

5.9AI score0.00182EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/22 12:15 p.m.4 views

SUSE-SU-2026:0221-1 Security update for curl

This update for curl fixes the following issues: - CVE-2025-14017: Fixed broken TLS options for threaded LDAPS bsc1256105...

6.3CVSS5.8AI score0.00108EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2026/01/22 10:48 a.m.193 views

Exploit for CVE-2026-24061

CVE-2026-24061 CVE-2026-24061 Batch Scanning Tool How to us...

9.8CVSS5.5AI score0.97878EPSS
SaveExploits65
NVD
NVD
added 2026/01/22 3:15 a.m.11 views

CVE-2026-23962

Mastodon is a free, open-source social network server based on ActivityPub. Mastodon versions before v4.3.18, v4.4.12, and v4.5.5 do not have a limit on the maximum number of poll options for remote posts, allowing attackers to create polls with a very large amount of options, greatly increasing...

7.5CVSS0.00506EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/01/22 1:51 a.m.14 views

CVE-2026-23962

Mastodon is a free, open-source social network server based on ActivityPub. Mastodon versions before v4.3.18, v4.4.12, and v4.5.5 do not have a limit on the maximum number of poll options for remote posts, allowing attackers to create polls with a very large amount of options, greatly increasing...

7.5CVSS5.6AI score0.00506EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
added 2026/01/22 1:51 a.m.12 views

EUVD-2026-4208

Mastodon is a free, open-source social network server based on ActivityPub. Mastodon versions before v4.3.18, v4.4.12, and v4.5.5 do not have a limit on the maximum number of poll options for remote posts, allowing attackers to create polls with a very large amount of options, greatly increasing...

7.5CVSS5.7AI score0.00506EPSS
SaveExploits0References4
CVE
CVE
added 2026/01/22 1:51 a.m.28 views

CVE-2026-23962

Mastodon is vulnerable to Denial of Service due to an unlimited maximum number of poll options for remote posts in versions before v4.3.18, v4.4.12, and v4.5.5. The underlying issue allows an attacker to create polls with a very large number of options, leading to disproportionate resource usage ...

7.5CVSS5.7AI score0.00506EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder