Lucene search
+L

29 matches found

CNNVD
CNNVD
added 2024/03/18 12:00 a.m.8 views

WordPress Plugin Responsive Pricing Table Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

5.4CVSS6AI score0.00401EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2024/03/07 12:00 a.m.10 views

PT-2024-17950 · WordPress · Responsive Pricing Table

Name of the Vulnerable Software and Affected Versions: The Responsive Pricing Table WordPress plugin versions prior to 5.1.11 Description: The issue concerns a Stored Cross-Site Scripting flaw in the Responsive Pricing Table WordPress plugin. This flaw could allow users with the author role and...

5.4CVSS8AI score0.00401EPSS
SaveExploits2References8
WPVulnDB
WPVulnDB
added 2024/02/26 12:00 a.m.14 views

Responsive Pricing Table < 5.1.11 - Author+ Stored XSS

Description The plugin does not validate and escape some of its Pricing Table options before outputting them back in a page/post where the related shortcode is embed, which could allow users with the author role and above to perform Stored Cross-Site Scripting attacks PoC - Create a new Pricing...

8.4AI score0.00401EPSS
SaveExploits2References1Affected Software1
OSV
OSV
added 2023/11/06 9:15 p.m.5 views

CVE-2023-4810

The Responsive Pricing Table WordPress plugin before 5.1.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS7.3AI score0.00436EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
added 2023/11/06 8:41 p.m.9 views

CVE-2023-4810 Responsive Pricing Table < 5.1.8 - Admin+ Stored Cross-Site Scriping

The Responsive Pricing Table WordPress plugin before 5.1.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.7AI score0.00436EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2023/11/06 8:41 p.m.37 views

CVE-2023-4810 Responsive Pricing Table < 5.1.8 - Admin+ Stored Cross-Site Scriping

The Responsive Pricing Table WordPress plugin before 5.1.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5AI score0.00436EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2023/11/06 12:00 a.m.10 views

WordPress plugin Responsive Pricing Table Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

4.8CVSS6.1AI score0.00436EPSS
SaveExploits2References3
CVE
CVE
added 2023/03/28 7:56 a.m.52 views

CVE-2022-46855

CVE-2022-46855 is a Stored Cross-Site Scripting (XSS) in the WP Darko Responsive Pricing Table plugin, affected versions ≤ 5.1.6. The root cause is insufficient sanitization/escaping of the fields.title parameter, which can allow a contributor (and higher) to inject JavaScript. The vulnerability’...

6.5CVSS5.3AI score0.00492EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/03/28 12:00 a.m.10 views

WordPress plugin Responsive Pricing Table 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS5.6AI score0.00492EPSS
SaveExploits0References2
Rows per page
Query Builder