Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 7:20 a.m.11 views

CVE-2024-8276

The WPZOOM Portfolio Lite – Filterable Portfolio Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘align’ attribute within the 'wp:wpzoom-blocks' Gutenberg block in all versions up to, and including, 1.4.4 due to insufficient input sanitization and output escaping...

6.4CVSS5.8AI score0.00352EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/09/02 3:46 a.m.2 views

WordPress WPZOOM Portfolio Lite plugin <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via align Attribute vulnerability discovered by Francesco Carlucci in WordPress Plugin WPZOOM Portfolio versions = 1.4.4...

6.4CVSS5.8AI score0.00352EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2024/08/31 8:15 a.m.3 views

CVE-2024-8276

The WPZOOM Portfolio Lite – Filterable Portfolio Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘align’ attribute within the 'wp:wpzoom-blocks' Gutenberg block in all versions up to, and including, 1.4.4 due to insufficient input sanitization and output escaping...

5.4CVSS5.9AI score0.00352EPSS
Exploits0References4
CVE
CVE
added 2024/08/31 7:36 a.m.44 views

CVE-2024-8276

CVE-2024-8276 (WPZOOM Portfolio Lite – Filterable Portfolio Plugin) affects WordPress WPZOOM Portfolio Lite. It allows Stored XSS via the align attribute in the wp:wpzoom-blocks Gutenberg block for all versions up to 1.4.4, caused by insufficient input sanitization and output escaping. Exploitati...

6.4CVSS5.5AI score0.00352EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2024/08/31 7:36 a.m.23 views

CVE-2024-8276 WPZOOM Portfolio Lite – Filterable Portfolio Plugin <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute

The WPZOOM Portfolio Lite – Filterable Portfolio Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘align’ attribute within the 'wp:wpzoom-blocks' Gutenberg block in all versions up to, and including, 1.4.4 due to insufficient input sanitization and output escaping...

6.4CVSS0.00352EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/08/31 12:0 a.m.4 views

PT-2024-38906 · Wpzoom · Wpzoom Portfolio Lite – Filterable Portfolio Plugin

Name of the Vulnerable Software and Affected Versions: WPZOOM Portfolio Lite – Filterable Portfolio Plugin plugin for WordPress versions up to, and including, 1.4.4 Description: The issue is related to Stored Cross-Site Scripting via the align attribute within the 'wp:wpzoom-blocks' Gutenberg blo...

6.4CVSS5.9AI score0.00352EPSS
Exploits0References10
CNNVD
CNNVD
added 2024/08/31 12:0 a.m.3 views

WordPress plugin WPZOOM Portfolio Lite 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

6.4CVSS5.9AI score0.00352EPSS
Exploits0References6
Rows per page
Query Builder