Lucene search
+L

7990 matches found

Cvelist
Cvelist
•added 2024/10/24 6:22 p.m.•62 views

CVE-2024-46994 baserCMS has Cross-site Scripting Vulnerability in Blog posts and Contents list Feature

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in Blog posts and Contents list Feature. Version 5.1.2 fixes this issue...

5.4CVSS0.00305EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/10/24 6:22 p.m.•37 views

CVE-2024-46994 baserCMS has Cross-site Scripting Vulnerability in Blog posts and Contents list Feature

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in Blog posts and Contents list Feature. Version 5.1.2 fixes this issue...

5.4CVSS5.9AI score0.00305EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/10/24 6:22 p.m.•18 views

CVE-2024-46994 baserCMS has Cross-site Scripting Vulnerability in Blog posts and Contents list Feature

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in Blog posts and Contents list Feature. Version 5.1.2 fixes this issue...

5.4CVSS6.2AI score0.00305EPSS
SaveExploits0References2
Mend
Mend
•added 2024/10/24 6:22 p.m.•6 views

CVE-2024-46994

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in Blog posts and Contents list Feature. Version 5.1.2 fixes this issue...

5.4CVSS0.00305EPSS
SaveExploits0References5
osv_ghsa
osv_ghsa
•added 2024/10/24 5:45 p.m.•20 views

GHSA-66JV-QRM3-VVFG baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts Feature

XSS vulnerability in Blog posts feature to baserCMS. Target baserCMS 5.1.1 and earlier versions Vulnerability Malicious code may be executed in Blog posts feature. Countermeasures Update to the latest version of baserCMS Please refer to the following page to reference for more information...

6.3CVSS6AI score0.00326EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2024/10/24 5:45 p.m.•25 views

baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts Feature

XSS vulnerability in Blog posts feature to baserCMS. Target baserCMS 5.1.1 and earlier versions Vulnerability Malicious code may be executed in Blog posts feature. Countermeasures Update to the latest version of baserCMS Please refer to the following page to reference for more information...

6.3CVSS6.3AI score0.00326EPSS
SaveExploits0References4Affected Software1
osv_ghsa
osv_ghsa
•added 2024/10/24 5:43 p.m.•81 views

GHSA-WRJC-FMFQ-W3JR baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts and Contents list Feature

XSS vulnerability in Blog posts and Contents list Feature to baserCMS. Target baserCMS 5.1.1 and earlier versions Vulnerability Malicious code may be executed in Blog posts and Contents list feature. Countermeasures Update to the latest version of baserCMS Please refer to the following page to...

5.4CVSS5.6AI score0.00305EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2024/10/24 5:43 p.m.•29 views

baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts and Contents list Feature

XSS vulnerability in Blog posts and Contents list Feature to baserCMS. Target baserCMS 5.1.1 and earlier versions Vulnerability Malicious code may be executed in Blog posts and Contents list feature. Countermeasures Update to the latest version of baserCMS Please refer to the following page to...

5.4CVSS6.3AI score0.00305EPSS
SaveExploits0References4Affected Software1
Patchstack
Patchstack
•added 2024/10/24 10:33 a.m.•13 views

WordPress Kodex Posts likes plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by theviper17 Patchstack Alliance in WordPress Plugin Kodex Posts likes versions = 2.5.0...

6.5CVSS6.1AI score0.00275EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2024/10/24 9:15 a.m.•30 views

CVE-2024-10050

The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Information Disclosure in all versions up to, and including, 1.6.43 via the hfetemplate shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to view the contents of Draft...

4.3CVSS0.00484EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2024/10/24 9:15 a.m.•20 views

CVE-2024-10050

The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Information Disclosure in all versions up to, and including, 1.6.43 via the hfetemplate shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to view the contents of Draft...

4.3CVSS5.8AI score0.00484EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2024/10/24 12:00 a.m.•17 views

WordPress Kodex Posts likes Plugin <= 2.5.0 is vulnerable to Cross Site Scripting (XSS)

Software Kodex Posts likes Type Plugin Vulnerable versions = 2.5.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50464 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 4d40ba7a06f0 Credits theviper17 Required privilege...

6.5CVSS6.5AI score0.00275EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/10/24 12:00 a.m.•11 views

PT-2024-32328 · Basercms · Basercms

Name of the Vulnerable Software and Affected Versions: baserCMS versions prior to 5.1.2 Description: The issue is a cross-site scripting vulnerability in the Blog posts feature of baserCMS, a website development framework. This vulnerability allows malicious code to be executed in the Blog posts...

6.3CVSS6.5AI score0.00326EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2024/10/24 12:00 a.m.•18 views

PT-2024-15998 · Elementor · Elementor Header & Footer Builder

Name of the Vulnerable Software and Affected Versions: Elementor Header & Footer Builder plugin for WordPress versions up to, and including, 1.6.43 Description: The issue allows authenticated attackers with Contributor-level access and above to view the contents of Draft, Private, and...

4.3CVSS6.6AI score0.00484EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2024/10/24 12:00 a.m.•5 views

PT-2024-32326

Name of the Vulnerable Software and Affected Versions baserCMS versions prior to 5.1.2 Description The issue is a cross-site scripting vulnerability in the Blog posts and Contents list Feature of baserCMS, a website development framework. This vulnerability allows malicious code to be executed in...

5.4CVSS5.6AI score0.00305EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/24 12:00 a.m.•5 views

CVE-2024-46994: Improper Neutralization of Input During Web Page Generation

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in Blog posts and Contents list Feature. Version 5.1.2 fixes this issue...

5.4CVSS5.9AI score0.00305EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/24 12:00 a.m.•2 views

CVE-2024-46996: Improper Neutralization of Input During Web Page Generation

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Blog posts feature. Version 5.1.2 fixes this issue...

6.3CVSS6.2AI score0.00326EPSS
SaveExploits0References1
Circl
Circl
•added 2024/10/22 12:00 p.m.•44 views

CVE-2024-7587

creationtimestamp| type| source ---|---|--- 2024-10-22 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-296-01 2024-10-23 02:20:16+00:00| seen| https://t.me/cvedetector/8670 2024-10-31 18:39:00+00:00| seen| https://t.me/icscert/939 2025-03-11 11:30:05+00:00| seen|...

7.8CVSS7.6AI score0.00192EPSS
SaveExploits0References9
Circl
Circl
•added 2024/10/22 12:24 a.m.•25 views

CVE-2024-35286

creationtimestamp| type| source ---|---|--- 2024-10-22 00:24:20+00:00| seen| https://t.me/cvedetector/8577 2024-12-05 14:44:20+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/9404 2024-12-05 16:34:02+00:00| seen|...

9.8CVSS7.1AI score0.65732EPSS
SaveExploits1References16
NVD
NVD
•added 2024/10/20 11:15 a.m.•56 views

CVE-2024-49628

Cross-Site Request Forgery CSRF vulnerability in whiletrue Most And Least Read Posts Widget most-and-least-read-posts-widget allows Cross Site Request Forgery.This issue affects Most And Least Read Posts Widget: from n/a through = 2.5.18...

8.8CVSS0.00208EPSS
SaveExploits0References1
Rows per page
Query Builder