Lucene search
+L

1162 matches found

RedhatCVE
RedhatCVE
added 2025/02/06 2:54 a.m.6 views

CVE-2025-23711

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Quincy Kwende Quote me quote-me allows Reflected XSS.This issue affects Quote me: from n/a through = 1.0...

7.1CVSS7.2AI score0.00222EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 2:27 a.m.7 views

CVE-2025-22589

Cross-Site Request Forgery CSRF vulnerability in bozdoz Quote Tweet quote-tweet allows Stored XSS.This issue affects Quote Tweet: from n/a through = 0.7...

7.1CVSS7.2AI score0.00146EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 6:47 a.m.7 views

CVE-2024-50479

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in chenyenming Woocommerce Quote Calculator woo-quote-calculator-order allows Blind SQL Injection.This issue affects Woocommerce Quote Calculator: from n/a through = 1.1...

9.8CVSS5.9AI score0.00475EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 3:16 a.m.10 views

CVE-2024-51626

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in chenyenming Woocommerce Quote Calculator woo-quote-calculator-order allows Blind SQL Injection.This issue affects Woocommerce Quote Calculator: from n/a through = 1.1...

8.8CVSS5.9AI score0.00432EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/02/03 4:12 p.m.5 views

WordPress Quote Comments plugin <= 3.0.0 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Quote Comments versions = 3.0.0...

7.1CVSS6.2AI score0.00137EPSS
SaveExploits0Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/01/24 11:15 a.m.2 views

CVE-2025-23711

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Quincy Kwende Quote me quote-me allows Reflected XSS.This issue affects Quote me: from n/a through = 1.0...

7.1CVSS7.2AI score0.00222EPSS
SaveExploits0References3
NVD
NVD
added 2025/01/24 11:15 a.m.16 views

CVE-2025-23711

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Quincy Kwende Quote me quote-me allows Reflected XSS.This issue affects Quote me: from n/a through = 1.0...

7.1CVSS0.00222EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/24 10:52 a.m.19 views

CVE-2025-23711 WordPress Quote me plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Quincy Kwende Quote me quote-me allows Reflected XSS.This issue affects Quote me: from n/a through = 1.0...

7.1CVSS0.00222EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/24 10:52 a.m.53 views

CVE-2025-23711

CVE-2025-23711 is a Reflected XSS in the WordPress Quote me plugin (

7.1CVSS7.2AI score0.00222EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/24 10:52 a.m.5 views

CVE-2025-23711 WordPress Quote me plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Quote me allows Reflected XSS. This issue affects Quote me: from n/a through 1.0...

7.1CVSS7AI score0.00222EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/24 12:0 a.m.8 views

PT-2025-5043 · Quote · Quote

Name of the Vulnerable Software and Affected Versions: Quote me versions 1.0 and below Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables attackers to inject malicious...

7.1CVSS9.3AI score0.00222EPSS
SaveExploits0References7
NVD
NVD
added 2025/01/17 7:15 a.m.20 views

CVE-2024-13386

The quote-posttype-plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Author field in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acces...

6.4CVSS0.00336EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/17 12:0 a.m.7 views

WordPress plugin quote-posttype-plugin 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

6.4CVSS7.5AI score0.00336EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/01/16 7:45 p.m.5 views

WordPress quote-posttype-plugin plugin <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin quote-posttype-plugin versions = 1.2.2...

6.4CVSS5.7AI score0.00336EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2025/01/16 6:42 p.m.6 views

WordPress Quote me plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Quote me versions = 1.0...

7.1CVSS6.1AI score0.00222EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/01/07 4:15 p.m.7 views

CVE-2025-22589

Cross-Site Request Forgery CSRF vulnerability in bozdoz Quote Tweet quote-tweet allows Stored XSS.This issue affects Quote Tweet: from n/a through = 0.7...

7.1CVSS0.00146EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/07 2:57 p.m.7 views

CVE-2025-22589 WordPress Quote Tweet plugin <= 0.7 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in bozdoz Quote Tweet allows Stored XSS.This issue affects Quote Tweet: from n/a through 0.7...

7.1CVSS7AI score0.00146EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/07 2:57 p.m.23 views

CVE-2025-22589 WordPress Quote Tweet plugin <= 0.7 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in bozdoz Quote Tweet quote-tweet allows Stored XSS.This issue affects Quote Tweet: from n/a through = 0.7...

7.1CVSS0.00146EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/07 2:57 p.m.52 views

CVE-2025-22589

CVE-2025-22589 affects the Quote Tweet plugin (bozdoz Quote Tweet) for WordPress. The issue is a CSRF in the quote-tweet component that enables Stored XSS (affecting versions from n/a through ≤ 0.7). The CVSS 3.1 score is 7.1 (HIGH) with network attack vector, low confidentiality/integrity/availa...

7.1CVSS7.2AI score0.00146EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/01/07 10:41 a.m.4 views

WordPress Quote Tweet plugin <= 0.7 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Quote Tweet versions = 0.7...

7.1CVSS6.2AI score0.00146EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder