Lucene search
+L

1186 matches found

CNNVD
CNNVD
added 2024/11/19 12:0 a.m.9 views

WordPress plugin Simple Pricing Table 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.5CVSS7.6AI score0.00268EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/18 10:0 p.m.56 views

CVE-2024-52343

CVE-2024-52343 is a stored XSS in the WordPress OS Pricing Tables plugin (Offshorent Softwares Pvt. Ltd./Jinesh.P.V). The vulnerability stems from improper input neutralization during web page generation, affecting OS Pricing Tables versions up to 1.2 (no fixed version explicitly stated in provid...

6.5CVSS7.2AI score0.00231EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/18 10:0 p.m.13 views

CVE-2024-52343 WordPress OS Pricing Tables plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Offshorent Softwares Pvt. Ltd. | Jinesh.P.V OS Pricing Tables allows Stored XSS.This issue affects OS Pricing Tables: from n/a through 1.2...

6.5CVSS6.8AI score0.00231EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/18 10:0 p.m.35 views

CVE-2024-52343 WordPress OS Pricing Tables plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Offshorent Solutions Pvt Ltd OS Pricing Tables os-pricing-tables allows Stored XSS.This issue affects OS Pricing Tables: from n/a through = 1.2...

6.5CVSS0.00231EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/18 12:0 a.m.7 views

PT-2024-35184 · Unknown · Os Pricing Tables

Name of the Vulnerable Software and Affected Versions: OS Pricing Tables versions 1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, which can be used to inject...

6.5CVSS5.6AI score0.00231EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/11/18 12:0 a.m.6 views

WordPress plugin OS Pricing Tables 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS8.2AI score0.00231EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/15 11:15 a.m.187 views

CVE-2023-2332

A stored Cross-site Scripting XSS vulnerability exists in the Conditions tab of Pricing Rules in pimcore/pimcore versions 10.5.19. The vulnerability is present in the From and To fields of the Date Range section, allowing an attacker to inject malicious scripts. This can lead to the execution of...

4.8CVSS0.00356EPSS
SaveExploits1References2
OSV
OSV
added 2024/11/15 10:57 a.m.19 views

CVE-2023-2332 Stored Cross-site Scripting (XSS) in pimcore/pimcore

A stored Cross-site Scripting XSS vulnerability exists in the Conditions tab of Pricing Rules in pimcore/pimcore versions 10.5.19. The vulnerability is present in the From and To fields of the Date Range section, allowing an attacker to inject malicious scripts. This can lead to the execution of...

4CVSS6.2AI score
SaveExploits0References4
Cvelist
Cvelist
added 2024/11/15 10:57 a.m.52 views

CVE-2023-2332 Stored Cross-site Scripting (XSS) in pimcore/pimcore

A stored Cross-site Scripting XSS vulnerability exists in the Conditions tab of Pricing Rules in pimcore/pimcore versions 10.5.19. The vulnerability is present in the From and To fields of the Date Range section, allowing an attacker to inject malicious scripts. This can lead to the execution of...

4CVSS0.00356EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/11/15 10:57 a.m.13 views

CVE-2023-2332 Stored Cross-site Scripting (XSS) in pimcore/pimcore

A stored Cross-site Scripting XSS vulnerability exists in the Conditions tab of Pricing Rules in pimcore/pimcore versions 10.5.19. The vulnerability is present in the From and To fields of the Date Range section, allowing an attacker to inject malicious scripts. This can lead to the execution of...

4CVSS4AI score0.00356EPSS
SaveExploits1References2
Patchstack
Patchstack
added 2024/11/08 6:7 p.m.5 views

WordPress OS Pricing Tables plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin OS Pricing Tables versions = 1.2...

6.5CVSS6.1AI score0.00231EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/11/08 4:13 p.m.7 views

WordPress Simple Pricing Table plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Simple Pricing Table versions = 1.0.0...

6.5CVSS6.1AI score0.00268EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/11/08 12:0 a.m.17 views

WordPress Simple Pricing Table Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Simple Pricing Table Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51899 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 9febfac93934 Credits SOPROBRO Required privilege...

6.5CVSS6.5AI score0.00268EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/11/08 12:0 a.m.14 views

WordPress OS Pricing Tables Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)

Software OS Pricing Tables Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52343 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c73f13923f0c Credits SOPROBRO Required privilege Contributor...

6.5CVSS6.9AI score0.00231EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/11/06 12:15 p.m.12 views

CVE-2024-8323

The Pricing Tables WordPress Plugin – Easy Pricing Tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘fontFamily’ attribute in all versions up to, and including, 3.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...

5.4CVSS5.9AI score0.00329EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/11/06 11:32 a.m.22 views

CVE-2024-8323 Pricing Tables WordPress Plugin – Easy Pricing Tables <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via fontFamily Attribute

The Pricing Tables WordPress Plugin – Easy Pricing Tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘fontFamily’ attribute in all versions up to, and including, 3.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...

6.4CVSS5.9AI score0.00329EPSS
SaveExploits0References4
CVE
CVE
added 2024/11/06 11:32 a.m.56 views

CVE-2024-8323

CVE-2024-8323 affects the Pricing Tables WordPress Plugin – Easy Pricing Tables (WordPress). The vulnerability is a Stored Cross-Site Scripting via the fontFamily attribute in all versions up to and including 3.2.6, exploitable by authenticated users with Contributor-level access or higher to inj...

6.4CVSS5.4AI score0.00329EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/06 12:0 a.m.13 views

PT-2024-38938 · WordPress · Easy Pricing Tables

Name of the Vulnerable Software and Affected Versions: Easy Pricing Tables plugin for WordPress versions up to, and including, 3.2.6 Description: The issue is related to Stored Cross-Site Scripting via the fontFamily attribute due to insufficient input sanitization and output escaping. This allow...

6.4CVSS6.1AI score0.00329EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2024/11/06 12:0 a.m.10 views

WordPress plugin Easy Pricing Tables 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS7.6AI score0.00329EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2024/11/05 11:34 p.m.10 views

WordPress Easy Pricing Tables plugin <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Francesco Carlucci in WordPress Plugin Easy Pricing Tables versions = 3.2.6...

6.4CVSS5.7AI score0.00329EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder