Lucene search
K

2406 matches found

Vulnrichment
Vulnrichment
added 2025/04/16 12:44 p.m.8 views

CVE-2025-39578 WordPress Responsive Blocks <= 2.0.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CyberChimps Responsive Blocks allows Stored XSS. This issue affects Responsive Blocks: from n/a through 2.0.2...

6.5CVSS6.9AI score0.00214EPSS
Exploits0References1
CVE
CVE
added 2025/04/16 12:44 p.m.63 views

CVE-2025-39578

CVE-2025-39578 is a stored XSS in WordPress plugin Responsive Blocks by CyberChimps, affecting versions up to 2.0.2. Root cause: improper input neutralization during web page generation. Impact per sources: user/admin input may be stored and executed in the context of other users, enabling script...

6.5CVSS7.2AI score0.00214EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/16 12:44 p.m.26 views

CVE-2025-39578 WordPress Responsive Blocks plugin <= 2.0.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CyberChimps Responsive Blocks responsive-block-editor-addons allows Stored XSS.This issue affects Responsive Blocks: from n/a through = 2.0.2...

6.5CVSS0.00214EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/16 12:0 a.m.6 views

PT-2025-16606 · Cyberchimps · Cyberchimps Responsive Blocks

Name of the Vulnerable Software and Affected Versions: CyberChimps Responsive Blocks versions n/a through 2.0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacke...

6.5CVSS6.7AI score0.00214EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/04/16 12:0 a.m.3 views

WordPress plugin Responsive Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

6.5CVSS6.7AI score0.00214EPSS
Exploits0References1
OSV
OSV
added 2025/04/15 6:15 a.m.2 views

CVE-2025-2225

The Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘raeltitletag' parameter in all versions up to, and including, 1.6.9 due to insufficient input sanitization and output escaping. Thi...

5.4CVSS5.9AI score0.0043EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/04/15 5:23 a.m.3 views

CVE-2025-2225 Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates <= 1.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'rael_title_tag'

The Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘raeltitletag' parameter in all versions up to, and including, 1.6.9 due to insufficient input sanitization and output escaping. Thi...

6.4CVSS5.7AI score0.0043EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/04/15 12:0 a.m.0 views

WordPress plugin Responsive Addons for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.4CVSS6.6AI score0.0043EPSS
Exploits0References4
CVE
CVE
added 2025/04/13 10:0 a.m.74 views

CVE-2025-3533

CVE-2025-3533 affects YouDianCMS 9.5.21. The vulnerability is an XSS in the file /App/Tpl/Admin/Default/Channel/index.html, caused by manipulation of the argument Parent. Exploitation may be remote; the exploit has been disclosed publicly. Connected documents consistently reference this filename/...

6.1CVSS4.3AI score0.00313EPSS
Exploits1References4Affected Software1
RedhatCVE
RedhatCVE
added 2025/04/06 5:7 p.m.17 views

CVE-2025-32273

Cross-Site Request Forgery CSRF vulnerability in freetobook Freetobook Responsive Widget freetobook-responsive-widget allows Cross Site Request Forgery.This issue affects Freetobook Responsive Widget: from n/a through = 1.1...

4.3CVSS7.2AI score0.00287EPSS
Exploits0References1
NVD
NVD
added 2025/04/04 4:15 p.m.4 views

CVE-2025-32273

Cross-Site Request Forgery CSRF vulnerability in freetobook Freetobook Responsive Widget freetobook-responsive-widget allows Cross Site Request Forgery.This issue affects Freetobook Responsive Widget: from n/a through = 1.1...

4.3CVSS0.00287EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/04 3:59 p.m.9 views

CVE-2025-32273 WordPress Freetobook Responsive Widget Plugin <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in freetobook Freetobook Responsive Widget allows Cross Site Request Forgery. This issue affects Freetobook Responsive Widget: from n/a through 1.1...

4.3CVSS7.2AI score0.00287EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/04 3:59 p.m.12 views

CVE-2025-32273 WordPress Freetobook Responsive Widget Plugin <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in freetobook Freetobook Responsive Widget freetobook-responsive-widget allows Cross Site Request Forgery.This issue affects Freetobook Responsive Widget: from n/a through = 1.1...

4.3CVSS0.00287EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/04 12:0 a.m.1 views

WordPress plugin Freetobook Responsive Widget 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

4.3CVSS5.9AI score0.00287EPSS
Exploits0References2
NVD
NVD
added 2025/04/01 3:16 p.m.3 views

CVE-2025-31743

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpszaki Lightweight and Responsive Youtube Embed lightweight-and-responsive-youtube-embed allows Stored XSS.This issue affects Lightweight and Responsive Youtube Embed: from n/a through = 1.0.0...

6.5CVSS0.00883EPSS
Exploits0References1
NVD
NVD
added 2025/04/01 3:16 p.m.3 views

CVE-2025-31744

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpszaki Lightweight and Responsive Youtube Embed lightweight-and-responsive-youtube-embed allows Stored XSS.This issue affects Lightweight and Responsive Youtube Embed: from n/a through = 1.0.0...

6.5CVSS0.00532EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/01 2:51 p.m.4 views

CVE-2025-31743 WordPress Lightweight and Responsive Youtube Embed Plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpszaki Lightweight and Responsive Youtube Embed allows Stored XSS. This issue affects Lightweight and Responsive Youtube Embed: from n/a through 1.0.0...

6.5CVSS7AI score0.00883EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/30 3:28 p.m.13 views

CVE-2025-22575

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in extendyourweb SUPER RESPONSIVE SLIDER super-slider allows Reflected XSS.This issue affects SUPER RESPONSIVE SLIDER: from n/a through = 1.4...

7.1CVSS7.2AI score0.00156EPSS
Exploits0References1
NVD
NVD
added 2025/03/28 3:15 p.m.7 views

CVE-2025-22575

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in extendyourweb SUPER RESPONSIVE SLIDER super-slider allows Reflected XSS.This issue affects SUPER RESPONSIVE SLIDER: from n/a through = 1.4...

7.1CVSS0.00156EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/28 3:12 p.m.22 views

CVE-2025-22575 WordPress SUPER RESPONSIVE SLIDER Plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in extendyourweb SUPER RESPONSIVE SLIDER super-slider allows Reflected XSS.This issue affects SUPER RESPONSIVE SLIDER: from n/a through = 1.4...

7.1CVSS0.00156EPSS
Exploits0References1
Rows per page
Query Builder