Lucene search
+L

196 matches found

WPVulnDB
WPVulnDB
added 2023/11/17 12:00 a.m.15 views

CodeBard's Patron Button and Widgets for Patreon < 2.2.0 - Reflected XSS

Description The plugin does not sanitise and escape the cbp6tab parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS6.3AI score0.00358EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2023/11/14 10:15 p.m.55 views

CVE-2023-47524

Unauth. Reflected Cross-Site Scripting XSS vulnerability requires PHP 8.x in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin = 2.1.9 versions...

6.1CVSS0.00358EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/14 10:15 p.m.8 views

CVE-2023-47524

Unauth. Reflected Cross-Site Scripting XSS vulnerability requires PHP 8.x in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin = 2.1.9 versions...

6.1CVSS7.3AI score0.00358EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/11/14 9:30 p.m.9 views

CVE-2023-47524 WordPress CodeBard's Patron Button and Widgets for Patreon Plugin <= 2.1.9 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability requires PHP 8.x in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin = 2.1.9 versions...

5.8CVSS5.9AI score0.00358EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/14 9:30 p.m.52 views

CVE-2023-47524

CVE-2023-47524 affects CodeBard's Patron Button and Widgets for Patreon plugin for WordPress (

6.1CVSS5.9AI score0.00358EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/11/14 12:00 a.m.55 views

WordPress Plugin CodeBard s Patron Button and Widgets for Patreon Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin CodeBard s...

6.1CVSS6.6AI score0.00358EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/11/14 12:00 a.m.13 views

WordPress CodeBard's Patron Button and Widgets for Patreon Plugin <= 2.1.9 is vulnerable to Cross Site Request Forgery (CSRF)

Software CodeBard's Patron Button and Widgets for Patreon Type Plugin Vulnerable versions = 2.1.9 Fixed in 2.2.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47765 Patch priority Low CVSS severity Low 4.3 Developer Codebard PSID 8a59ce87622d...

8.8CVSS6.7AI score0.00256EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/11/07 12:00 a.m.17 views

WordPress CodeBard's Patron Button and Widgets for Patreon Plugin <= 2.1.9 is vulnerable to Cross Site Scripting (XSS)

Software CodeBard's Patron Button and Widgets for Patreon Type Plugin Vulnerable versions = 2.1.9 Fixed in 2.2.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47524 Patch priority High CVSS severity High 5.8 Developer Codebard PSID 00014dfb79a5...

6.1CVSS5.7AI score0.00358EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/11/07 12:00 a.m.17 views

WordPress Patreon WordPress Plugin <= 1.8.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software Patreon WordPress Type Plugin Vulnerable versions = 1.8.7 Fixed in 1.8.8 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-41129 Patch priority Low CVSS severity Low 4.3 Developer Patreon PSID 609331c56271 Credits BuShiYue Required privile...

8.8CVSS6.6AI score0.00294EPSS
SaveExploits0References2Affected Software1
WPVulnDB
WPVulnDB
added 2023/08/07 12:00 a.m.14 views

CodeBard's Patron Button and Widgets for Patreon < 2.1.9 - Reflected XSS

Description The plugin does not sanitise and escape the siteaccount parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS5.8AI score0.00382EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2023/08/05 11:15 p.m.31 views

CVE-2023-30491

Unauth. Reflected Cross-Site Scripting XSS vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin = 2.1.8 versions...

7.1CVSS6.3AI score0.00382EPSS
SaveExploits0References1
OSV
OSV
added 2023/08/05 11:15 p.m.10 views

CVE-2023-30491

Unauth. Reflected Cross-Site Scripting XSS vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin = 2.1.8 versions...

6.1CVSS7.3AI score0.00382EPSS
SaveExploits0References1
Prion
Prion
added 2023/08/05 11:15 p.m.37 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin = 2.1.8 versions...

5.8CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/05 10:35 p.m.17 views

CVE-2023-30491 WordPress CodeBard's Patron Button and Widgets for Patreon Plugin <= 2.1.8 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin = 2.1.8 versions...

7.1CVSS5.9AI score0.00382EPSS
SaveExploits0References1
CVE
CVE
added 2023/08/05 10:35 p.m.65 views

CVE-2023-30491

CVE-2023-30491 is an unauthenticated reflected XSS in CodeBard's Patron Button and Widgets for Patreon WordPress plugin (versions

7.1CVSS6.1AI score0.00382EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/08/05 12:00 a.m.9 views

PT-2023-22727 · Codebard · Patron Button/Widgets For Patreon

Name of the Vulnerable Software and Affected Versions: CodeBard's Patron Button and Widgets for Patreon plugin versions = 2.1.8 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scrip...

7.1CVSS6.2AI score0.00382EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/08/05 12:00 a.m.6 views

WordPress plugin CodeBard Patron Button and Widgets for Patreon Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

7.1CVSS6.1AI score0.00382EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/07/24 12:00 a.m.22 views

WordPress CodeBard's Patron Button and Widgets for Patreon Plugin <= 2.1.8 is vulnerable to Cross Site Scripting (XSS)

Software CodeBard's Patron Button and Widgets for Patreon Type Plugin Vulnerable versions = 2.1.8 Fixed in 2.1.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-30491 Patch priority Medium CVSS severity Medium 7.1 Developer Codebard PSID 9bd81d51b303...

7.1CVSS5.7AI score0.00382EPSS
SaveExploits0References1Affected Software1
Kitploit
Kitploit
added 2022/12/26 11:30 a.m.82 views

Havoc - Modern and malleable post-exploitation command and control framework

Havoc is a modern and malleablepost-exploitation command and control framework, created by @C5pider. Havoc is in an early state of release. Breaking changes may be made to APIs/core structures as the framework matures. Support Consider supporting C5pider on Patreon/Github Sponsors. Additional...

7.4AI score
SaveExploits0References14
NVD
NVD
added 2022/10/26 8:15 p.m.22 views

CVE-2022-39355

Discourse Patreon enables syncronization between Discourse Groups and Patreon rewards. On sites with Patreon login enabled, an improper authentication vulnerability could be used to take control of a victim's forum account. This vulnerability is patched in commit number...

9.8CVSS0.00832EPSS
SaveExploits0References2
Rows per page
Query Builder