2 matches found
PT-2026-71292
Name of the Vulnerable Software and Affected Versions Shescape versions prior to 2.1.14 Shescape versions prior to 3.0.1 Description The getEscapeFunction function in src/internal/win/cmd.js fails to escape and characters when using the escape or escapeAll APIs on Windows systems where the shell ...
9.2CVSS5.5AI score0.00889EPSS
SaveExploits0References14
CVE-2021-24153
A Stored Cross-Site Scripting vulnerability was discovered in the Yoast SEO WordPress plugin before 3.4.1, which had built-in blacklist filters which were blacklisting Parenthesis as well as several functions such as alert but bypasses were found...
5.4CVSS6AI score0.01115EPSS
SaveExploits1References4
20