Lucene search
K

6 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-54797

Malicious code in bioql PyPI...

6.4CVSS6.2AI score0.00134EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/05/23 4:27 a.m.4 views

CVE-2023-4961

The Poptin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'poptin-form' shortcode in versions up to, and including, 1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

6.4CVSS5.8AI score0.00134EPSS
Exploits1References1
OSV
OSV
added 2023/10/20 8:15 a.m.0 views

CVE-2023-4961

The Poptin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'poptin-form' shortcode in versions up to, and including, 1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

5.4CVSS6.9AI score0.00134EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2023/10/20 7:29 a.m.5 views

CVE-2023-4961 Poptin <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Poptin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'poptin-form' shortcode in versions up to, and including, 1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

6.4CVSS6.8AI score0.00134EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/10/20 12:0 a.m.2 views

WordPress Plugin Poptin Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

6.4CVSS6AI score0.00134EPSS
Exploits1References4
Patchstack
Patchstack
added 2023/09/19 12:0 a.m.8 views

WordPress Poptin Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)

Software Poptin Type Plugin Vulnerable versions = 1.3 Fixed in 1.3.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4961 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6ca61fb922bb Credits Lana Codes Required privilege...

6.4CVSS6AI score0.00134EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder