Lucene search
K

349 matches found

OSV
OSV
added 2024/07/22 9:15 a.m.1 views

CVE-2024-37257

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Maciej Bis Permalink Manager Lite allows Reflected XSS.This issue affects Permalink Manager Lite: from n/a through 2.4.3.3...

6.1CVSS5.8AI score0.00213EPSS
Exploits0References1
NVD
NVD
added 2024/07/22 9:15 a.m.13 views

CVE-2024-37257

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Maciej Bis Permalink Manager Lite allows Reflected XSS.This issue affects Permalink Manager Lite: from n/a through 2.4.3.3...

7.1CVSS0.00213EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/07/22 9:6 a.m.21 views

CVE-2024-37257 WordPress Permalink Manager Lite plugin <= 2.4.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Maciej Bis Permalink Manager Lite allows Reflected XSS.This issue affects Permalink Manager Lite: from n/a through 2.4.3.3...

7.1CVSS0.00213EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/07/22 9:6 a.m.22 views

CVE-2024-37257 WordPress Permalink Manager Lite plugin <= 2.4.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Maciej Bis Permalink Manager Lite allows Reflected XSS.This issue affects Permalink Manager Lite: from n/a through 2.4.3.3...

7.1CVSS7AI score0.00213EPSS
Exploits0References1
CVE
CVE
added 2024/07/22 9:6 a.m.41 views

CVE-2024-37257

CVE-2024-37257 describes a Reflected XSS in Permalink Manager Lite (WordPress plugin) affecting versions up to 2.4.3.3. The vulnerability is due to improper neutralization of input during web page generation. Connected sources note the vulnerability is patched, but the exact fixed version is not ...

7.1CVSS7AI score0.00213EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/07/22 12:0 a.m.2 views

PT-2024-27421 · Unknown · Permalink Manager Lite

Name of the Vulnerable Software and Affected Versions: Permalink Manager Lite versions 2.4.3.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For...

7.1CVSS6.5AI score0.00213EPSS
Exploits0References4
Patchstack
Patchstack
added 2024/06/27 10:14 a.m.2 views

WordPress Permalink Manager Lite plugin <= 2.4.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Permalink Manager Lite versions = 2.4.3.3...

7.1CVSS6.1AI score0.00213EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/06/27 12:0 a.m.11 views

WordPress Permalink Manager Lite Plugin <= 2.4.3.3 is vulnerable to Cross Site Scripting (XSS)

Software Permalink Manager Lite Type Plugin Vulnerable versions = 2.4.3.3 Fixed in 2.4.3.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37257 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e3ec5eb6c45f Credits Rafie Muhammad...

7.1CVSS6.8AI score0.00213EPSS
Exploits0References2Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:46 p.m.4 views

Malicious code in active-model-permalink (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0References1
OSV
OSV
added 2024/06/25 1:46 p.m.4 views

MAL-2024-6407 Malicious code in active-model-permalink (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
Exploits0References1
NVD
NVD
added 2024/05/17 9:15 a.m.16 views

CVE-2024-27971

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Premmerce Premmerce Permalink Manager for WooCommerce woo-permalink-manager.This issue affects Premmerce Permalink Manager for WooCommerce: from n/a through = 2.3.10...

8.3CVSS8.3AI score0.67362EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/05/17 8:51 a.m.18 views

CVE-2024-27971 WordPress Premmerce Permalink Manager for WooCommerce plugin <= 2.3.10 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Premmerce Premmerce Permalink Manager for WooCommerce woo-permalink-manager.This issue affects Premmerce Permalink Manager for WooCommerce: from n/a through = 2.3.10...

8.3CVSS7.2AI score0.67362EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/05/17 8:51 a.m.24 views

CVE-2024-27971 WordPress Premmerce Permalink Manager for WooCommerce plugin <= 2.3.10 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Premmerce Premmerce Permalink Manager for WooCommerce woo-permalink-manager.This issue affects Premmerce Permalink Manager for WooCommerce: from n/a through = 2.3.10...

8.3CVSS8.3AI score0.67362EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/05/17 12:0 a.m.4 views

PT-2024-22177 · Woocommerce · Premmerce Permalink Manager For Woocommerce

Name of the Vulnerable Software and Affected Versions: Premmerce Permalink Manager for WooCommerce versions prior to 2.3.11 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability. This vulnerability allow...

8.3CVSS9.4AI score0.67362EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/05/17 12:0 a.m.2 views

WordPress plugin Premmerce Permalink Manager for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.3CVSS8.3AI score0.67362EPSS
Exploits0References2
NVD
NVD
added 2024/04/29 6:15 a.m.12 views

CVE-2024-33681

Cross-Site Request Forgery CSRF vulnerability in Sandor Kovacs Regenerate post permalink allows Cross-Site Scripting XSS.This issue affects Regenerate post permalink: from n/a through 1.0.3...

7.1CVSS6.7AI score0.00144EPSS
Exploits0References1
CVE
CVE
added 2024/04/29 6:1 a.m.49 views

CVE-2024-33681

The CVE-2024-33681 entry concerns the WordPress plugin Regenerate post permalink (versions n/a through 1.0.3). The connected documents describe a CSRF vulnerability that enables Cross-Site Scripting (XSS) due to missing or incorrect nonce validation on a function. Unauthenticated attackers could ...

7.1CVSS5.1AI score0.00144EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/04/29 6:1 a.m.14 views

CVE-2024-33681 WordPress Regenerate post permalink plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) leading to XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Sandor Kovacs Regenerate post permalink allows Cross-Site Scripting XSS.This issue affects Regenerate post permalink: from n/a through 1.0.3...

7.1CVSS6.6AI score0.00144EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/04/29 12:0 a.m.2 views

WordPress plugin Regenerate post permalink 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Regenerate post permalink...

7.1CVSS6.7AI score0.00144EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/04/28 12:0 a.m.3 views

PT-2024-25437 · WordPress · Regenerate Post Permalink

Name of the Vulnerable Software and Affected Versions: Regenerate post permalink versions n/a through 1.0.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross-Site Scripting XSS in the Regenerate post permalink plugin. Recommendations: For versions n/a...

7.1CVSS6.3AI score0.00144EPSS
Exploits0References6
Rows per page
Query Builder