Lucene search
K

196 matches found

CNNVD
CNNVD
added 2026/05/27 12:0 a.m.8 views

WordPress plugin EventPress 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There wa...

7.1CVSS5.8AI score0.00164EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/05/13 12:0 a.m.6 views

Garmin WDU 安全漏洞

Garmin WDU is a wireless data unit developed by Garmin Corporation, designed for data updates and maintenance of aviation electronic equipment. Versions 1.1.6 and 2.5.0 of Garmin WDU contain security vulnerabilities. These vulnerabilities stem from allowing reflective cross-site scripting attacks...

5CVSS5.9AI score0.0014EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.4 views

WordPress plugin Boutique 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There wa...

7.1CVSS5.7AI score0.00175EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.6 views

WordPress plugin Reebox 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There wa...

7.1CVSS5.6AI score0.0018EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/05 12:0 a.m.5 views

WordPress plugin Starto 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

7.1CVSS5.7AI score0.00191EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/04 12:0 a.m.4 views

Cisco Secure Firewall Adaptive Security Appliance和Cisco Secure Firewall Threat Defense 跨站脚本漏洞

Cisco Secure Firewall Adaptive Security Appliance and Cisco Secure Firewall Threat Defense are products of Cisco, a US company. Cisco Secure Firewall Adaptive Security Appliance is an enterprise-level firewall software. Cisco Secure Firewall Threat Defense is an integrated firewall platform. Both...

6.1CVSS5.7AI score0.00264EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/02/27 12:0 a.m.6 views

Omega-PSIR 跨站脚本漏洞

Omega-PSIR is a comprehensive scientific information management system operated by Politechnika Warszawska. Omega-PSIR has a cross-site scripting vulnerability, which stems from the reflective cross-site scripting present in the lang parameter. This vulnerability could allow attackers to execute...

6.1CVSS5.9AI score0.00158EPSS
Exploits2References2
CNNVD
CNNVD
added 2026/02/19 12:0 a.m.5 views

Comodo Dome Firewall 跨站脚本漏洞

Comodo Dome Firewall is a unified threat management and next-generation firewall provided by the Chinese company Comodo. Version 2.7.0 of Comodo Dome Firewall contains a cross-site scripting vulnerability. This vulnerability stems from improper cleaning of the device parameter input in QoS device...

6.1CVSS5.6AI score0.00344EPSS
Exploits1References4
CNNVD
CNNVD
added 2026/02/10 12:0 a.m.3 views

Silicon Labs Simplicity Device Manager Tool 安全漏洞

The Silicon Labs Simplicity Device Manager Tool is a hardware enumeration, configuration, and fault-diagnosis tool developed by Silicon Labs, Inc. The tool has a security vulnerability caused by reflective cross-site scripting in multiple API endpoints. This vulnerability could allow attackers to...

7.5CVSS5.8AI score0.00258EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/01/22 12:0 a.m.4 views

WordPress plugin Netgsm has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. WordPress...

7.1CVSS5.7AI score0.00237EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/22 12:0 a.m.3 views

WordPress plugin MemberPress Discord Addon: Cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

7.1CVSS5.7AI score0.00222EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/22 12:0 a.m.4 views

WordPress Plugin ApusTheme Drone Cross-site Scripting Vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

7.1CVSS5.7AI score0.00244EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/22 12:0 a.m.7 views

WordPress plugin Grand Magazine has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.1CVSS5.3AI score0.00175EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/20 12:0 a.m.3 views

MedDream PACS Premium security vulnerability

MedDream PACS Premium is an enterprise-level image storage and management server suite developed by MedDream Corporation. Version 7.3.6.870 of MedDream PACS Premium contains a security vulnerability caused by a reflective cross-site scripting vulnerability in the ldapUser function, which may allo...

6.1CVSS5.9AI score0.00286EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:36 p.m.4 views

CVE-2023-49494

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component selectmediapostwangEditor.php...

6.1CVSS6.2AI score0.01176EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:36 p.m.6 views

CVE-2023-49489

Reflective Cross Site Scripting XSS vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive information and escalate privileges via the APPHOST parameter at config/i18n/en/main.php...

6.1CVSS5.8AI score0.00726EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:36 p.m.5 views

CVE-2023-49490

XunRuiCMS v4.5.5 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /admin.php...

6.1CVSS6.2AI score0.00446EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/12/23 12:0 a.m.3 views

TechStore 安全漏洞

TechStore is a subscription software platform from TechStore Inc. in the United Arab Emirates. A security vulnerability exists in TechStore version 1.0, which stems from the id parameter not being encoded or cleaned up, which could lead to a reflective cross-site scripting attack...

6.1CVSS6AI score0.00178EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/15 12:0 a.m.2 views

Inventory Management System 安全漏洞

Inventory Management System is an inventory management system by stemword individual developers. A security vulnerability exists in Inventory Management System version 1, which originates from a reflective cross-site scripting in the /index.php/cuzh4 component that could lead to the execution of...

6.1CVSS6AI score0.00185EPSS
Exploits1References3
CNNVD
CNNVD
added 2025/12/10 12:0 a.m.3 views

XWiki Platform 安全漏洞

XWiki Platform is XWiki's open source suite of Wiki platforms for creating web collaboration applications. A security vulnerability exists in XWiki Platform that stems from vulnerability to reflective cross-site scripting attacks...

6.5CVSS5.9AI score0.00463EPSS
Exploits1References4
Rows per page
Query Builder