Lucene search
+L

288 matches found

NVD
NVD
added 2022/07/11 1:15 p.m.40 views

CVE-2022-1910

The Shortcodes and extra features for Phlox WordPress plugin before 2.9.8 does not sanitise and escape a parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting...

6.1CVSS0.01379EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/07/11 1:15 p.m.7 views

CVE-2022-1910

The Shortcodes and extra features for Phlox WordPress plugin before 2.9.8 does not sanitise and escape a parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.4AI score0.01379EPSS
SaveExploits1References3
OSV
OSV
added 2022/07/11 1:15 p.m.10 views

CVE-2022-1910

The Shortcodes and extra features for Phlox WordPress plugin before 2.9.8 does not sanitise and escape a parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.4AI score0.01379EPSS
SaveExploits1References1
Prion
Prion
added 2022/07/11 1:15 p.m.16 views

Cross site scripting

The Shortcodes and extra features for Phlox WordPress plugin before 2.9.8 does not sanitise and escape a parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting...

4.3CVSS6.1AI score0.01379EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/07/11 12:56 p.m.43 views

CVE-2022-1910 Shortcodes and extra features for Phlox theme < 2.9.8 - Reflected Cross-Site-Scripting

The Shortcodes and extra features for Phlox WordPress plugin before 2.9.8 does not sanitise and escape a parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting...

6.2AI score0.01379EPSS
SaveExploits1References1
CVE
CVE
added 2022/07/11 12:56 p.m.104 views

CVE-2022-1910

The CVE-2022-1910 is tied to the WordPress Shortcodes and Extra Features for Phlox plugin (pre-2.9.8). The NUCLEI template confirms a cross-site scripting flaw where the plugin does not sanitize/escape a parameter before echoing it in the response. This allows an attacker to inject arbitrary scri...

6.1CVSS6.1AI score0.01379EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.15 views

WordPress plugin Shortcodes and extra features for Phlox 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. WordPress Shortcodes and extra features for Phlox plugin versions prior to 2.9.8 contain a...

6.1CVSS5.2AI score0.01379EPSS
SaveExploits1References2
Patchstack
Patchstack
added 2022/06/20 12:00 a.m.37 views

WordPress Shortcodes and extra features for Phlox theme plugin <= 2.9.7 - Reflected Cross-Site-Scripting (XSS) vulnerability

Reflected Cross-Site-Scripting XSS vulnerability discovered by cydave in WordPress Shortcodes and extra features for Phlox theme plugin versions = 2.9.7. Solution Update the WordPress Shortcodes and extra features for Phlox theme plugin to the latest available version at least 2.9.8...

6.1CVSS2.5AI score0.01379EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder