Lucene search
+L

298 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/06 12:00 a.m.•3 views

CVE-2024-47340: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Stored XSS.This issue affects Post Grid and Gutenberg Blocks: from n/a through = 2.2.89...

6.5CVSS5.8AI score0.00275EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/06 12:00 a.m.•28 views

PT-2024-32557 · Pickplugins · Pickplugins Accordion

Name of the Vulnerable Software and Affected Versions: PickPlugins Accordion versions 2.2.99 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS in PickPlugins Accordion...

6.5CVSS5.8AI score0.00275EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/10/06 12:00 a.m.•9 views

PT-2024-32555 · Pickplugins · Pickplugins Post Grid

Name of the Vulnerable Software and Affected Versions: PickPlugins Post Grid and Gutenberg Blocks versions 2.2.89 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS,...

6.5CVSS6.6AI score0.00275EPSS
SaveExploits0References6
OSV
OSV
•added 2024/09/18 12:15 a.m.•20 views

CVE-2024-44002

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PickPlugins Team Showcase allows Reflected XSS.This issue affects Team Showcase: from n/a through 1.22.25...

6.1CVSS5.8AI score0.00307EPSS
SaveExploits0References1
NVD
NVD
•added 2024/09/18 12:15 a.m.•40 views

CVE-2024-44002

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Team Showcase team allows Reflected XSS.This issue affects Team Showcase: from n/a through = 1.22.25...

7.1CVSS0.00307EPSS
SaveExploits0References1
CVE
CVE
•added 2024/09/17 11:12 p.m.•77 views

CVE-2024-44002

The CVE-2024-44002 entry concerns the WordPress Team Showcase plugin (Team Showcase) and is a Reflected Cross-Site Scripting (XSS) vulnerability in versions 1.22.25 and earlier. The vulnerability stems from improper input neutralization during web page generation, enabling a reflected XSS conditi...

7.1CVSS5.9AI score0.00307EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/09/15 8:15 a.m.•29 views

CVE-2024-45459

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Product Slider for WooCommerce woocommerce-products-slider allows Reflected XSS.This issue affects Product Slider for WooCommerce: from n/a through = 1.13.50...

7.1CVSS0.00308EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/09/15 7:41 a.m.•39 views

CVE-2024-45459 WordPress Product Slider for WooCommerce by PickPlugins plugin <= 1.13.50 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Product Slider for WooCommerce woocommerce-products-slider allows Reflected XSS.This issue affects Product Slider for WooCommerce: from n/a through = 1.13.50...

7.1CVSS0.00308EPSS
SaveExploits0References1
CVE
CVE
•added 2024/09/15 7:41 a.m.•70 views

CVE-2024-45459

CVE-2024-45459 concerns the WordPress plugin Product Slider for WooCommerce by PickPlugins, affected versions 1.13.50 and earlier. The issue is a Reflected Cross-Site Scripting (XSS) vulnerability arising from improper input neutralization during web page generation, enabling attacker-supplied sc...

7.1CVSS5.9AI score0.00308EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/15 12:00 a.m.•3 views

CVE-2024-45459: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Product Slider for WooCommerce woocommerce-products-slider allows Reflected XSS.This issue affects Product Slider for WooCommerce: from n/a through = 1.13.50...

7.1CVSS5.8AI score0.00308EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/09/15 12:00 a.m.•26 views

PT-2024-31649 · Pickplugins · Pickplugins Product Slider For Woocommerce

Name of the Vulnerable Software and Affected Versions: PickPlugins Product Slider for WooCommerce versions 1.13.50 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS,...

7.1CVSS6.6AI score0.00308EPSS
SaveExploits0References12
Patchstack
Patchstack
•added 2024/09/12 7:06 a.m.•19 views

WordPress Product Slider for WooCommerce by PickPlugins plugin <= 1.13.50 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin Product Slider for WooCommerce versions = 1.13.50...

7.1CVSS6.1AI score0.00308EPSS
SaveExploits0Affected Software1
Wordfence Blog
Wordfence Blog
•added 2024/09/10 4:19 p.m.•50 views

Over 40,000 WordPress Sites Affected by Privilege Escalation Vulnerability Patched in Post Grid and Gutenberg Blocks Plugin

📢 Did you know Wordfence runs aBug Bounty Program for all WordPress plugins and themes at no cost to vendors? Through October 7th, 2024, XSS vulnerabilities in all plugins and themes with =1,000 Active Installs are in scope for all researchers. In addition, through October 14th, 2024 , r esearche...

8.8CVSS8.7AI score0.09372EPSS
SaveExploits0
NVD
NVD
•added 2024/08/18 3:15 p.m.•43 views

CVE-2024-43321

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PickPlugins Team Showcase allows Stored XSS.This issue affects Team Showcase: from n/a through 1.22.23...

6.5CVSS0.0026EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/08/18 2:13 p.m.•45 views

CVE-2024-43321 WordPress Team Showcase plugin <= 1.22.23 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PickPlugins Team Showcase allows Stored XSS.This issue affects Team Showcase: from n/a through 1.22.23...

6.5CVSS0.0026EPSS
SaveExploits0References1
CVE
CVE
•added 2024/08/18 2:13 p.m.•80 views

CVE-2024-43321

CVE-2024-43321 corresponds to a Stored XSS vulnerability in the PickPlugins Team Showcase WordPress plugin (Team Showcase) prior to version 1.22.23. The issue involves improper input neutralization during web page generation, enabling stored cross-site scripting. According to the connected Wordfe...

6.5CVSS6.5AI score0.0026EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/08/18 2:13 p.m.•18 views

CVE-2024-43321 WordPress Team Showcase plugin <= 1.22.23 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PickPlugins Team Showcase allows Stored XSS.This issue affects Team Showcase: from n/a through 1.22.23...

6.5CVSS6.8AI score0.0026EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2024/08/12 10:15 p.m.•8 views

CVE-2024-43155

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PickPlugins ComboBlocks allows Stored XSS.This issue affects ComboBlocks: from n/a through 2.2.86...

6.5CVSS5.2AI score0.00259EPSS
SaveExploits0References2
NVD
NVD
•added 2024/08/12 10:15 p.m.•25 views

CVE-2024-43155

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PickPlugins ComboBlocks allows Stored XSS.This issue affects ComboBlocks: from n/a through 2.2.86...

6.5CVSS0.00259EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/08/12 10:06 p.m.•10 views

CVE-2024-43155 WordPress ComboBlocks plugin <= 2.2.86 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PickPlugins ComboBlocks allows Stored XSS.This issue affects ComboBlocks: from n/a through 2.2.86...

6.5CVSS6.8AI score0.00259EPSS
SaveExploits0References1
Rows per page
Query Builder