3 matches found
EUVD-2023-12565
Malicious code in bioql PyPI...
5.4CVSS6.6AI score0.00239EPSS
SaveExploits2References1
CVE-2023-0520
The RapidExpCart WordPress plugin through 1.0 does not sanitize and escape the url parameter in the rapidexpcart endpoint before storing it and outputting it back in the page, leading to a Stored Cross-Site Scripting vulnerability which could be used against high-privilege users such as admin,...
5.4CVSS5.2AI score0.00239EPSS
SaveExploits2References1
CVE-2023-0520 RapidExpCart <= 1.0 - Stored XSS via CSRF
The RapidExpCart WordPress plugin through 1.0 does not sanitize and escape the url parameter in the rapidexpcart endpoint before storing it and outputting it back in the page, leading to a Stored Cross-Site Scripting vulnerability which could be used against high-privilege users such as admin,...
5.3AI score0.00239EPSS
SaveExploits2References1
20