Lucene search
+L

3712 matches found

Vulnrichment
Vulnrichment
•added 2025/06/27 1:21 p.m.•7 views

CVE-2025-53287 WordPress Quick Favicon plugin <= 0.22.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Robert Cummings Quick Favicon quick-favicon allows Stored XSS.This issue affects Quick Favicon: from n/a through = 0.22.8...

5.9CVSS5.9AI score0.00249EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/27 1:21 p.m.•22 views

CVE-2025-53287 WordPress Quick Favicon plugin <= 0.22.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Robert Cummings Quick Favicon quick-favicon allows Stored XSS.This issue affects Quick Favicon: from n/a through = 0.22.8...

5.9CVSS0.00249EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/27 1:21 p.m.•39 views

CVE-2025-53287

CVE-2025-53287 affects the WordPress Quick Favicon plugin. It is a stored XSS due to improper input neutralization during web-page generation, impacting versions up to 0.22.8. Exploitation details or exact patched version are not provided in the documents; remediation is to upgrade to a version t...

5.9CVSS5.9AI score0.00249EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/06/27 12:00 a.m.•12 views

WordPress plugin Quick Favicon 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

5.9CVSS5.8AI score0.00249EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/06/27 12:00 a.m.•17 views

PT-2025-27192 · Unknown · Quick Favicon

Name of the Vulnerable Software and Affected Versions: Quick Favicon versions through 0.22.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This enables an attacker to inject malicious...

5.9CVSS5.7AI score0.00249EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/27 12:00 a.m.•5 views

CVE-2025-53287: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Robert Cummings Quick Favicon quick-favicon allows Stored XSS.This issue affects Quick Favicon: from n/a through = 0.22.8...

5.9CVSS5.8AI score0.00249EPSS
SaveExploits0References1
osv_ghsa
osv_ghsa
•added 2025/06/11 3:30 p.m.•30 views

GHSA-R6XJ-43CF-9F88 Drupal Quick Node Block Missing Authorization vulnerability

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing. This issue affects Quick Node Block: from 0.0.0 before 2.0.0...

5.3CVSS7.1AI score0.00268EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2025/06/11 3:30 p.m.•19 views

Drupal Quick Node Block Missing Authorization vulnerability

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing. This issue affects Quick Node Block: from 0.0.0 before 2.0.0...

5.3CVSS7.1AI score0.00268EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2025/06/11 3:30 p.m.•25 views

GHSA-C424-HGG9-9C4W Drupal Quick Node Block Missing Authorization vulnerability

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing. This issue affects Quick Node Block: from 0.0.0 before 2.0.0...

5.3CVSS7.1AI score0.00268EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2025/06/11 3:30 p.m.•24 views

Drupal Quick Node Block Missing Authorization vulnerability

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing. This issue affects Quick Node Block: from 0.0.0 before 2.0.0...

5.3CVSS7.1AI score0.00268EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2025/06/11 3:15 p.m.•28 views

CVE-2025-48444

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0 before 2.0.0...

5.3CVSS0.00268EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/11 3:15 p.m.•22 views

CVE-2025-48013

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0 before 2.0.0...

5.3CVSS0.00268EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/06/11 2:20 p.m.•7 views

CVE-2025-48013 Quick Node Block - Moderately critical - Access bypass - SA-CONTRIB-2025-065

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0 before 2.0.0...

7.2AI score0.00268EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/11 2:20 p.m.•75 views

CVE-2025-48013

The Drupal Quick Node Block module (versions 0.0.0 through 1.9.9 ) is susceptible to a Missing Authorization vulnerability. This flaw allows for Forceful Browsing , potentially enabling unauthorized access to restricted content. To remediate this issue, users are recommended to update to version ...

5.3CVSS7AI score0.00268EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/06/11 2:20 p.m.•28 views

CVE-2025-48013 Quick Node Block - Moderately critical - Access bypass - SA-CONTRIB-2025-065

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0 before 2.0.0...

0.00268EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/06/11 2:20 p.m.•19 views

CVE-2025-48013 Quick Node Block - Moderately critical - Access bypass - SA-CONTRIB-2025-065

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0 before 2.0.0...

5.3CVSS5.9AI score0.00268EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2025/06/11 2:19 p.m.•30 views

CVE-2025-48444 Quick Node Block - Moderately critical - Access bypass - SA-CONTRIB-2025-064

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0 before 2.0.0...

5.3CVSS5.9AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/06/11 2:19 p.m.•7 views

CVE-2025-48444 Quick Node Block - Moderately critical - Access bypass - SA-CONTRIB-2025-064

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0 before 2.0.0...

7.2AI score0.00268EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/11 2:19 p.m.•71 views

CVE-2025-48444

A Missing Authorization vulnerability exists in the Drupal Quick Node Block plugin (versions 0.0.0 through 1.9.9 ). This flaw allows for Forceful Browsing , enabling unauthorized access to certain resources. To remediate this issue, users should update to version 2.0.0 or later. Exploitation deta...

5.3CVSS7AI score0.00268EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/06/11 2:19 p.m.•35 views

CVE-2025-48444 Quick Node Block - Moderately critical - Access bypass - SA-CONTRIB-2025-064

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0 before 2.0.0...

0.00268EPSS
SaveExploits0References1
Rows per page
Query Builder