Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2009-0807

Malware in sbrugna...

3.5CVSS6.4AI score0.00856EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/03/01 9:23 a.m.7 views

CVE-2024-13734

The Card Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Profile Card widget in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS5.8AI score0.00266EPSS
Exploits0References1
OSV
OSV
added 2025/02/27 10:15 a.m.1 views

CVE-2024-13734

The Card Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Profile Card widget in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

5.4CVSS6AI score0.00266EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/02/27 9:21 a.m.10 views

CVE-2024-13734 Card Elements for Elementor <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Profile Card Widget

The Card Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Profile Card widget in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00266EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/02/27 12:0 a.m.2 views

WordPress plugin Card Elements for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.4CVSS7.8AI score0.00266EPSS
Exploits0References5
NVD
NVD
added 2009/03/04 5:30 p.m.12 views

CVE-2009-0809

The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the profile card of an object in the document class via a link that is sent from the owner of the document object...

3.5CVSS6.2AI score0.00856EPSS
Exploits0References4
Prion
Prion
added 2009/03/04 5:30 p.m.19 views

Design/Logic Flaw

The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the profile card of an object in the document class via a link that is sent from the owner of the document object...

3.5CVSS6.7AI score0.00856EPSS
Exploits0References4Affected Software2
Rows per page
Query Builder