Lucene search
+L

62 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/14 12:00 a.m.•3 views

CVE-2025-23655: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in crystalwebpro Contact Form 7 – Paystack Add-on cf7-paystack-add-on allows Reflected XSS.This issue affects Contact Form 7 – Paystack Add-on: from n/a through = 1.2.3...

7.1CVSS5.8AI score0.00308EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/02/04 5:39 a.m.•345 views

Exploit for CVE-2025-22652

CVE-2025-22652 1️⃣ Component type WordPress plugin 2️...

7.6CVSS9.9AI score0.00875EPSS
SaveExploits1
Patchstack
Patchstack
•added 2025/02/03 7:06 p.m.•18 views

WordPress Payment Forms for Paystack plugin <= 4.0.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Webula Patchstack Alliance in WordPress Plugin Payment Forms for Paystack versions = 4.0.1...

7.6CVSS8.1AI score0.00875EPSS
SaveExploits1Affected Software1
Patchstack
Patchstack
•added 2025/01/16 6:42 p.m.•16 views

WordPress Contact Form 7 – Paystack Add-on plugin <= 1.2.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh in WordPress Plugin Contact Form 7 – Paystack Add-on versions = 1.2.3...

7.1CVSS6.1AI score0.00308EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2024/04/17 10:15 a.m.•58 views

CVE-2024-32130

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paystack Payment Forms for Paystack allows Stored XSS.This issue affects Payment Forms for Paystack: from n/a through 3.4.1...

6.5CVSS6.5AI score0.00291EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/17 9:59 a.m.•100 views

CVE-2024-32130

CVE-2024-32130 refers to a Stored Cross-Site Scripting vulnerability in the WordPress plugin “Payment Forms for Paystack.” The initial documents consistently state that versions up to and including 3.4.1 are affected (e.g., RH Red Hat entry and CVE listings). The vulnerability arises from imprope...

6.5CVSS5.2AI score0.00291EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/17 9:59 a.m.•41 views

CVE-2024-32130 WordPress Payment Forms for Paystack plugin <= 3.4.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paystack Payment Forms for Paystack allows Stored XSS.This issue affects Payment Forms for Paystack: from n/a through 3.4.1...

6.5CVSS6.8AI score0.00291EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/17 9:59 a.m.•68 views

CVE-2024-32130 WordPress Payment Forms for Paystack plugin <= 3.4.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paystack Payment Forms for Paystack allows Stored XSS.This issue affects Payment Forms for Paystack: from n/a through 3.4.1...

6.5CVSS6.7AI score0.00291EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/04/17 12:00 a.m.•17 views

WordPress Plugin Payment Forms for Paystack 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

6.5CVSS6AI score0.00291EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/17 12:00 a.m.•23 views

PT-2024-24425 · Paystack · Payment Forms For Paystack

Name of the Vulnerable Software and Affected Versions: Paystack Payment Forms for Paystack versions 3.4.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS, where an attacker...

6.5CVSS5.8AI score0.00291EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/17 12:00 a.m.•3 views

CVE-2024-32130: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paystack Payment Forms for Paystack allows Stored XSS.This issue affects Payment Forms for Paystack: from n/a through 3.4.1...

6.5CVSS5.8AI score0.00291EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/04/12 9:42 a.m.•27 views

WordPress Payment Forms for Paystack plugin <= 4.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by NGÔ THIÊN AN Patchstack Alliance in WordPress Plugin Payment Forms for Paystack versions = 4.0.0...

6.5CVSS6.1AI score0.00291EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/04/12 12:00 a.m.•44 views

WordPress Payment Forms for Paystack Plugin <= 4.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Payment Forms for Paystack Type Plugin Vulnerable versions = 4.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32130 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID bdaaf2a9d240 Credits Ngô Thiên An ancorn from...

6.5CVSS6.6AI score0.00291EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2024/02/08 4:15 a.m.•21 views

CVE-2023-5665

The Payment Forms for Paystack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 3.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

5.4CVSS5.9AI score0.00525EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2024/02/08 3:33 a.m.•18 views

CVE-2023-5665 Payment Forms for Paystack <= 3.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Payment Forms for Paystack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 3.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.7AI score0.00525EPSS
SaveExploits0References10
Cvelist
Cvelist
•added 2024/02/08 3:33 a.m.•52 views

CVE-2023-5665 Payment Forms for Paystack <= 3.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Payment Forms for Paystack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 3.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.3AI score0.00525EPSS
SaveExploits0References10
CVE
CVE
•added 2024/02/08 3:33 a.m.•92 views

CVE-2023-5665

The Payment Forms for Paystack plugin for WordPress is affected by a Stored XSS in all versions up to 3.4.1 due to insufficient input sanitization and output escaping on user-supplied shortcode attributes. Exploitation requires attacker with contributor-level permissions to inject scripts, which ...

6.4CVSS5.3AI score0.00525EPSS
SaveExploits0References10Affected Software1
CNNVD
CNNVD
•added 2024/02/08 12:00 a.m.•24 views

WordPress plugin Payment Forms for Paystack Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.4CVSS5.9AI score0.00525EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/08 12:00 a.m.•7 views

CVE-2023-5665: Improper Neutralization of Input During Web Page Generation

The Payment Forms for Paystack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 3.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.9AI score0.00525EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/02/08 12:00 a.m.•22 views

PT-2024-14823 · WordPress · Payment Forms For Paystack

Name of the Vulnerable Software and Affected Versions: Payment Forms for Paystack plugin for WordPress versions up to, and including, 3.4.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's shortcodes due to insufficient input sanitization and output escaping on...

6.4CVSS8AI score0.00525EPSS
SaveExploits0References12
Rows per page
Query Builder