Lucene search
K

54 matches found

Nuclei
Nuclei
added 19 hours ago4 views

WordPress Stray Random Quotes <= 1.9.9 - Cross-Site Scripting

Stray Random Quotes WordPress plugin = 1.9.9 contains a reflected cross-site scripting caused by a lack of sanitization and escaping of a parameter before output, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a malicious URL...

6.1CVSS7.6AI score0.01706EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2026/01/09 8:48 a.m.3 views

CVE-2025-23883

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in unalignedcoder Stray Random Quotes stray-quotes allows Reflected XSS.This issue affects Stray Random Quotes: from n/a through = 1.9.9...

7.1CVSS5.9AI score0.00346EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-9080

Malicious code in bioql PyPI...

9.3CVSS9.1AI score0.0008EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-51676

Malicious code in bioql PyPI...

6.1CVSS8.9AI score0.01706EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-5678

Malicious code in bioql PyPI...

7.1CVSS6.6AI score0.00346EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-14724

Malicious code in bioql PyPI...

7.1CVSS7.7AI score0.00257EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-8160

Malicious code in bioql PyPI...

7.1CVSS9.2AI score0.00189EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/04/05 2:23 p.m.6 views

CVE-2025-31903

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xavi Ivars XV Random Quotes xv-random-quotes allows Reflected XSS.This issue affects XV Random Quotes: from n/a through = 2.0.0...

7.1CVSS7.2AI score0.00257EPSS
Exploits0References1
NVD
NVD
added 2025/04/03 2:15 p.m.4 views

CVE-2025-31903

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xavi Ivars XV Random Quotes xv-random-quotes allows Reflected XSS.This issue affects XV Random Quotes: from n/a through = 2.0.0...

7.1CVSS0.00257EPSS
Exploits0References1
CVE
CVE
added 2025/04/03 1:27 p.m.53 views

CVE-2025-31903

CVE-2025-31903 affects the XV Random Quotes WordPress plugin (versions up to 1.37). The issue is a Reflected XSS caused by improper input neutralization during web page generation. Public details include CVSS 3.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) with base score 7.1 (HIGH). The Initial Descri...

7.1CVSS7.2AI score0.00257EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/03 1:27 p.m.15 views

CVE-2025-31903 WordPress XV Random Quotes plugin <= 2.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xavi Ivars XV Random Quotes xv-random-quotes allows Reflected XSS.This issue affects XV Random Quotes: from n/a through = 2.0.0...

7.1CVSS0.00257EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/03 9:51 a.m.6 views

CVE-2025-30971

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Xavi Ivars XV Random Quotes xv-random-quotes allows SQL Injection.This issue affects XV Random Quotes: from n/a through = 2.0.0...

9.3CVSS7.3AI score0.0008EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/03 12:0 a.m.1 views

WordPress plugin XV Random Quotes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7AI score0.00257EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/03 12:0 a.m.3 views

PT-2025-14751 · Unknown · Xv Random Quotes

Name of the Vulnerable Software and Affected Versions: XV Random Quotes versions n/a through 1.37 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to injec...

7.1CVSS7.5AI score0.00257EPSS
Exploits0References7
NVD
NVD
added 2025/04/01 6:15 a.m.16 views

CVE-2025-30971

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Xavi Ivars XV Random Quotes xv-random-quotes allows SQL Injection.This issue affects XV Random Quotes: from n/a through = 2.0.0...

9.3CVSS0.0008EPSS
Exploits0References1
CVE
CVE
added 2025/04/01 5:32 a.m.50 views

CVE-2025-30971

CVE-2025-30971 (XV Random Quotes) is an SQL Injection in the XV Random Quotes WordPress plugin. The vulnerability arises from improper input handling, affecting XV Random Quotes versions up to 1.40 (n/a–1.40). It is rated CRITICAL (CVSS 3.1: 9.3) with NETWORK attack vector and HIGH confidentialit...

9.3CVSS7.3AI score0.0008EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/01 5:32 a.m.4 views

CVE-2025-30971 WordPress XV Random Quotes plugin <= 2.0.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Xavi Ivars XV Random Quotes xv-random-quotes allows SQL Injection.This issue affects XV Random Quotes: from n/a through = 2.0.0...

9.3CVSS7.4AI score0.0008EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/01 5:32 a.m.12 views

CVE-2025-30971 WordPress XV Random Quotes plugin <= 2.0.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Xavi Ivars XV Random Quotes xv-random-quotes allows SQL Injection.This issue affects XV Random Quotes: from n/a through = 2.0.0...

9.3CVSS0.0008EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/01 12:0 a.m.3 views

PT-2025-14072 · Unknown · Xv Random Quotes

Name of the Vulnerable Software and Affected Versions: XV Random Quotes versions n/a through 1.40 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection, which is a critical cyber...

9.3CVSS9.9AI score0.0008EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/04/01 12:0 a.m.1 views

WordPress plugin XV Random Quotes SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

9.3CVSS9.2AI score0.0008EPSS
Exploits0References2
Rows per page
Query Builder