Lucene search
+L

276 matches found

CNVD
CNVD
added 2022/04/27 12:0 a.m.13 views

WordPress Pricing Table by Supsystic plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Pricing Table by Supsystic plugin versions prior to 1.9.5 contain a cross-site scripting...

6.1CVSS2.4AI score0.00788EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/04/25 4:16 p.m.5 views

CVE-2021-46782

The Pricing Table by Supsystic WordPress plugin before 1.9.5 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.3AI score0.00788EPSS
SaveExploits1References2
NVD
NVD
added 2022/04/25 4:16 p.m.24 views

CVE-2021-46782

The Pricing Table by Supsystic WordPress plugin before 1.9.5 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting...

6.1CVSS0.00788EPSS
SaveExploits1References1
OSV
OSV
added 2022/04/25 4:16 p.m.5 views

CVE-2021-46782

The Pricing Table by Supsystic WordPress plugin before 1.9.5 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting...

6.1CVSS5.8AI score0.00788EPSS
SaveExploits1References1
Prion
Prion
added 2022/04/25 4:16 p.m.12 views

Cross site scripting

The Pricing Table by Supsystic WordPress plugin before 1.9.5 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting...

4.3CVSS6.1AI score0.00788EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/04/25 3:50 p.m.19 views

CVE-2021-46782 Pricing Table by Supsystic < 1.9.5 - Reflected Cross-Site Scripting

The Pricing Table by Supsystic WordPress plugin before 1.9.5 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting...

6.3AI score0.00788EPSS
SaveExploits1References1
CVE
CVE
added 2022/04/25 3:50 p.m.85 views

CVE-2021-46782

The CVE CVE-2021-46782 affects the WordPress plugin Pricing Table by Supsystic, prior to version 1.9.5. The vulnerability arises because the tab parameter is not escaped before being echoed in an attribute in the admin dashboard, enabling reflected cross-site scripting. Impact is described as a r...

6.1CVSS6.1AI score0.00788EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/04/25 12:0 a.m.7 views

WordPress plugin Pricing Table by Supsystic 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Pricing Table by Supsystic plugin versions prior to 1.9.5 contain a cross-site scripting...

6.1CVSS5.3AI score0.00788EPSS
SaveExploits1References3
CNVD
CNVD
added 2022/04/13 12:0 a.m.12 views

WordPress Pricing Table plugin跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Pricing Table plugin 1.5.2 and earlier versions contain a cross-site scripting vulnerability that can be exploited by an...

4.8CVSS0.7AI score0.00576EPSS
SaveExploits0References1
NVD
NVD
added 2022/04/11 8:15 p.m.24 views

CVE-2021-36896

Authenticated author or higher user role Stored Cross-Site Scripting XSS vulnerability in Pricing Table WordPress plugin versions = 1.5.2...

4.8CVSS0.00576EPSS
SaveExploits0References2
OSV
OSV
added 2022/04/11 8:15 p.m.5 views

CVE-2021-36896

Authenticated author or higher user role Stored Cross-Site Scripting XSS vulnerability in Pricing Table WordPress plugin versions = 1.5.2...

4.8CVSS5.8AI score0.00576EPSS
SaveExploits0References2
CVE
CVE
added 2022/04/11 7:36 p.m.95 views

CVE-2021-36896

CVE-2021-36896 affects the WordPress plugin Pricing Table (versions ≤ 1.5.2). The vulnerability is an authenticated Stored XSS in the plugin, arising from insufficient sanitization/escaping of input parameters, allowing an attacker with author or higher privileges to execute arbitrary JavaScript ...

4.8CVSS4.9AI score0.00576EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/04/11 7:36 p.m.28 views

CVE-2021-36896 WordPress Pricing Table plugin <= 1.5.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated author or higher user role Stored Cross-Site Scripting XSS vulnerability in Pricing Table WordPress plugin versions = 1.5.2...

4.8CVSS5.1AI score0.00576EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/04/11 12:0 a.m.6 views

WordPress plugin Pricing Table 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Pricing Table plugin 1.5.2 and earlier versions contain a cross-site scripting vulnerability that can be exploited by an...

4.8CVSS5.7AI score0.00576EPSS
SaveExploits0References3
WPVulnDB
WPVulnDB
added 2022/04/05 12:0 a.m.25 views

Pricing Table <= 1.5.2 - Author+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some parameters, which could allow users with a role as low as author to perform Cross-Site Scripting attacks...

4.8CVSS3.3AI score0.00576EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2022/04/05 12:0 a.m.32 views

WordPress Pricing Table plugin <= 1.5.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Ngo Van Thien Patchstack Alliance in WordPress Pricing Table plugin versions = 1.5.2. Solution No patched version is available...

4.8CVSS3AI score0.00576EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/03/22 12:0 a.m.12 views

WordPress Pricing Table plugin <= 3.6 - Unauthenticated SQL Injection (SQLi) vulnerability

Unauthenticated SQL Injection SQLi vulnerability discovered in WordPress Pricing Table plugin versions = 3.6. Solution Update the WordPress Pricing Table plugin to the latest available version at least 3.6.1...

3.1AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2022/03/22 12:0 a.m.43 views

WordPress Pricing Table Plugin plugin <= 3.6 - Authenticated SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability discovered by cydave in WordPress Pricing Table Plugin plugin versions = 3.6. Solution Update the WordPress Pricing Table Plugin plugin to the latest available version at least 3.6.1...

9.8CVSS3.1AI score0.13256EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/03/21 7:15 p.m.4 views

CVE-2022-0640

The Pricing Table Builder WordPress plugin before 1.1.5 does not sanitize and escape the postid parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.4AI score0.00853EPSS
SaveExploits2References2
ATTACKERKB
ATTACKERKB
added 2022/03/21 7:15 p.m.4 views

CVE-2022-0640

The Pricing Table Builder WordPress plugin before 1.1.5 does not sanitize and escape the postid parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.3AI score0.00853EPSS
SaveExploits2References3
Rows per page
Query Builder