Lucene search
+L

2993 matches found

Vulnrichment
Vulnrichment
added 2023/05/02 7:4 a.m.9 views

CVE-2023-1554 Quick Paypal Payments < 5.7.26.4 - Admin+ Stored XSS

The Quick Paypal Payments WordPress plugin before 5.7.26.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.7AI score0.0047EPSS
SaveExploits2References1
CVE
CVE
added 2023/05/02 7:4 a.m.65 views

CVE-2023-1554

The CVE concerns the Quick Paypal Payments WordPress plugin. Affected: Quick Paypal Payments plugin for WordPress (prior to version 5.7.26.4). Issue: insufficient sanitisation/escaping of certain settings, enabling Stored XSS by high-privilege users (e.g., administrators) even when unfiltered_htm...

4.8CVSS4.7AI score0.0047EPSS
SaveExploits2References1Affected Software1
CNNVD
CNNVD
added 2023/05/02 12:0 a.m.6 views

WordPress plugin Quick Paypal Payments 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

4.8CVSS4.9AI score0.0047EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2023/05/02 12:0 a.m.6 views

PT-2023-17070 · WordPress · Quick Paypal Payments

Name of the Vulnerable Software and Affected Versions: Quick Paypal Payments WordPress plugin versions prior to 5.7.26.4 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability is...

4.8CVSS4.6AI score0.0047EPSS
SaveExploits2References4
NVD
NVD
added 2023/04/25 8:15 p.m.27 views

CVE-2023-23889

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Paypal Payments plugin = 5.7.25 versions...

6.5CVSS5.9AI score0.00361EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/25 8:15 p.m.6 views

CVE-2023-23889

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Paypal Payments plugin = 5.7.25 versions...

5.4CVSS6.7AI score0.00361EPSS
SaveExploits0References1
CVE
CVE
added 2023/04/25 7:24 p.m.52 views

CVE-2023-23889

CVE-2023-23889 affects the WordPress plugin Fullworks Quick Paypal Payments (versions

6.5CVSS5.3AI score0.00361EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/25 7:24 p.m.11 views

CVE-2023-23889 WordPress Quick Paypal Payments Plugin <= 5.7.25 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Paypal Payments plugin = 5.7.25 versions...

6.5CVSS5.5AI score0.00361EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/25 5:15 p.m.5 views

CVE-2022-47608

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Contact Form plugin = 8.0.3.1 versions...

4.8CVSS5.8AI score0.00369EPSS
SaveExploits0References1
NVD
NVD
added 2023/04/25 5:15 p.m.23 views

CVE-2022-47608

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Contact Form plugin = 8.0.3.1 versions...

5.9CVSS5.4AI score0.00369EPSS
SaveExploits0References1
CVE
CVE
added 2023/04/25 4:56 p.m.42 views

CVE-2022-47608

CVE-2022-47608 affects the WordPress plugin Quick Contact Form (Fullworks) up to version 8.0.3.1. The issue is a Stored Cross-Site Scripting (XSS) vulnerability exploitable by an authenticated attacker with admin+ privileges, as the root cause is insufficient input validation/escaping in the plug...

5.9CVSS4.9AI score0.00369EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/04/25 4:56 p.m.29 views

CVE-2022-47608 WordPress Quick Contact Form Plugin <= 8.0.3.1 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Contact Form plugin = 8.0.3.1 versions...

5.9CVSS5.5AI score0.00369EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/04/25 4:56 p.m.11 views

CVE-2022-47608 WordPress Quick Contact Form Plugin <= 8.0.3.1 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Contact Form plugin = 8.0.3.1 versions...

5.9CVSS5.5AI score0.00369EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/04/25 12:0 a.m.7 views

WordPress Plugin Quick Contact Form 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.9CVSS6.4AI score0.00369EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/04/25 12:0 a.m.9 views

WordPress plugin Quick Paypal Payments 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.5CVSS6.6AI score0.00361EPSS
SaveExploits0References3
Qualys Blog
Qualys Blog
added 2023/04/24 9:40 a.m.29 views

Qualys Security Solutions Now Support Alibaba Cloud

Enterprise IT environments are getting exponentially more complex with the booming adoption of cloud computing, upping the ante for InfoSec teams, which must protect these new environments. As the foundation for modern IT innovations that propel digital transformation, public cloud platforms are...

6.7AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2023/04/11 7:0 a.m.1492 views

January 10, 2023—KB5022289 (OS Build 14393.5648)

None None...

9.1CVSS6.8AI score0.91597EPSS
SaveExploits4
Microsoft KB
Microsoft KB
added 2023/04/11 7:0 a.m.1102 views

January 10, 2023—KB5022286 (OS Build 17763.3887) - EXPIRED

None None...

8.8CVSS6.8AI score0.91597EPSS
SaveExploits4
GithubExploit
GithubExploit
added 2023/04/09 5:26 a.m.469 views

Exploit for CVE-2023-31497

EPScalate An elevation of privilege vulnerability in QuickHeal...

7.8CVSS8AI score0.00515EPSS
SaveExploits2
NVD
NVD
added 2023/04/07 1:15 p.m.25 views

CVE-2023-25702

Auth. admin+ Stored Cross-site Scripting XSS vulnerability in Fullworks Quick Paypal Payments plugin = 5.7.25 versions...

5.9CVSS5.4AI score0.00392EPSS
SaveExploits0References1
Rows per page
Query Builder