Lucene search
+L

6 matches found

NVD
NVD
•added 2026/04/09 9:16 p.m.•14 views

CVE-2023-54360

Joomla JLex Review 6.0.1 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the reviewid URL parameter. Attackers can craft malicious links containing JavaScript payloads that execute in victims' browsers when clicked, enablin...

6.1CVSS0.00194EPSS
SaveExploits0References4
CVE
CVE
•added 2026/04/09 8:54 p.m.•20 views

CVE-2023-54360

Affected product/component: Joomla JLex Review 6.0.1 (Joomla extension). Vulnerability: Reflected cross-site scripting (XSS) via the review_id URL parameter. Root cause / details: The vulnerability allows an attacker to inject malicious scripts by manipulating the review_id parameter; crafted lin...

6.1CVSS5.9AI score0.00194EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/04/09 8:54 p.m.•7 views

CVE-2023-54360

Joomla JLex Review 6.0.1 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the reviewid URL parameter. Attackers can craft malicious links containing JavaScript payloads that execute in victims' browsers when clicked, enablin...

6.1CVSS5.9AI score0.00194EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/09 12:00 a.m.•2 views

CVE-2023-54360: Improper Neutralization of Input During Web Page Generation

Joomla JLex Review 6.0.1 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the reviewid URL parameter. Attackers can craft malicious links containing JavaScript payloads that execute in victims' browsers when clicked, enablin...

6.1CVSS5.8AI score0.00194EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/18 12:00 a.m.•13 views

WordPress plugin Tour Master SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

8.8CVSS9.3AI score0.00487EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/18 12:00 a.m.•1 views

CVE-2024-13369: Improper Neutralization of Special Elements used in an SQL Command

The Tour Master - Tour Booking, Travel, Hotel plugin for WordPress is vulnerable to time-based SQL Injection via the ‘reviewid’ parameter in all versions up to, and including, 5.3.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

8.8CVSS5.7AI score0.00487EPSS
SaveExploits0References1
Rows per page
Query Builder