Lucene search
K

6 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-34308

Malicious code in bioql PyPI...

6.4CVSS8.7AI score0.00233EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 7:51 a.m.2 views

CVE-2024-11439

The ScanCircle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'scancircle' shortcode in all versions up to, and including, 2.9.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.8AI score0.00233EPSS
Exploits0References1
NVD
NVD
added 2024/12/18 3:15 a.m.6 views

CVE-2024-11439

The ScanCircle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'scancircle' shortcode in all versions up to, and including, 2.9.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00233EPSS
Exploits0References4
CVE
CVE
added 2024/12/18 2:8 a.m.39 views

CVE-2024-11439

CVE-2024-11439 : The ScanCircle WordPress plugin is vulnerable to a stored XSS via the plugin’s scancircle shortcode in all versions up to and including 2.9.2. Exploitation requires authentication at Contributor level or higher, and scripts injected by an attacker could execute in pages viewed by...

6.4CVSS5.7AI score0.00233EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2024/12/18 2:8 a.m.7 views

CVE-2024-11439 ScanCircle <= 2.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

The ScanCircle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'scancircle' shortcode in all versions up to, and including, 2.9.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.8AI score0.00233EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/12/18 2:8 a.m.15 views

CVE-2024-11439 ScanCircle <= 2.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

The ScanCircle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'scancircle' shortcode in all versions up to, and including, 2.9.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00233EPSS
Exploits0References4
Rows per page
Query Builder