Lucene search
+L

6 matches found

Patchstack
Patchstack
•added 2025/03/11 7:23 a.m.•21 views

WordPress S3Bubble Media Streaming plugin <= 8.0 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin S3Bubble Media Streaming versions = 8.0...

7.1CVSS8.7AI score0.00273EPSS
SaveExploits1References1Affected Software1
osv_cve
osv_cve
•added 2025/03/11 6:15 a.m.•22 views

CVE-2024-13862

The S3Bubble Media Streaming AWS|Elementor|YouTube|Vimeo Functionality WordPress plugin through 8.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS5.8AI score0.00273EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/03/11 6:00 a.m.•10 views

CVE-2024-13862 S3Bubble Media Streaming <= 8.0 - Reflected XSS

The S3Bubble Media Streaming AWS|Elementor|YouTube|Vimeo Functionality WordPress plugin through 8.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.4AI score0.00273EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/11 12:00 a.m.•6 views

PT-2025-10696

Name of the Vulnerable Software and Affected Versions S3Bubble Media Streaming WordPress plugin versions prior to 8.1 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in th...

7.1CVSS0.00273EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2025/03/11 12:00 a.m.•17 views

WordPress plugin S3Bubble Media Streaming 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

7.1CVSS8.3AI score0.00273EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/11 12:00 a.m.•12 views

CVE-2024-13862: Improper Neutralization of Input During Web Page Generation

The S3Bubble Media Streaming AWS|Elementor|YouTube|Vimeo Functionality WordPress plugin through 8.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS5.8AI score0.00273EPSS
SaveExploits1References1
Rows per page
Query Builder