Lucene search
+L

3855 matches found

NVD
NVD
added 2024/02/01 11:15 a.m.37 views

CVE-2023-51677

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magazine3 Schema & Structured Data for WP & AMP allows Stored XSS.This issue affects Schema & Structured Data for WP & AMP: from n/a through 1.23...

6.5CVSS6.5AI score0.00328EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/01 11:15 a.m.22 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magazine3 Schema & Structured Data for WP & AMP allows Stored XSS.This issue affects Schema & Structured Data for WP & AMP: from n/a through 1.23...

4.9CVSS7AI score0.00328EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/02/01 10:28 a.m.45 views

CVE-2023-51677 WordPress Schema & Structured Data for WP & AMP Plugin <= 1.23 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magazine3 Schema & Structured Data for WP & AMP allows Stored XSS.This issue affects Schema & Structured Data for WP & AMP: from n/a through 1.23...

6.5CVSS6.6AI score0.00328EPSS
SaveExploits0References1
CVE
CVE
added 2024/02/01 10:28 a.m.60 views

CVE-2023-51677

CVE-2023-51677 is a Stored Cross-Site Scripting vulnerability in the WordPress plugin Schema & Structured Data for WP & AMP . Root cause: improper input neutralization during web page generation. Affected versions:

6.5CVSS6.7AI score0.00328EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/01 10:28 a.m.17 views

CVE-2023-51677 WordPress Schema & Structured Data for WP & AMP Plugin <= 1.23 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magazine3 Schema & Structured Data for WP & AMP allows Stored XSS.This issue affects Schema & Structured Data for WP & AMP: from n/a through 1.23...

6.5CVSS6.7AI score0.00328EPSS
SaveExploits0References1
Veracode
Veracode
added 2024/02/01 9:37 a.m.21 views

Server-Side Request Forgery

github.com/apache/servicecomb-service-center is vulnerable to Server-Side Request Forgery. The vulnerability is due to server.go because there is improper validation for user-supplied URLs or IP addresses that the service accesses for schema validation purposes. An attacker can craft a request an...

7.6CVSS6.7AI score0.0346EPSS
SaveExploits0References7Affected Software1
CNNVD
CNNVD
added 2024/02/01 12:0 a.m.9 views

WordPress plugin Schema & Structured Data for WP & AMP Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.5CVSS6.2AI score0.00328EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/02/01 12:0 a.m.10 views

PT-2024-14235 · Unknown · Magazine3 Schema & Structured Data For Wp & Amp

Name of the Vulnerable Software and Affected Versions: Magazine3 Schema & Structured Data for WP & AMP versions 1.23 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means an attack...

6.5CVSS5.9AI score0.00328EPSS
SaveExploits0References7
OSV
OSV
added 2024/01/31 7:15 p.m.9 views

CVE-2024-22146

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magazine3 Schema & Structured Data for WP & AMP allows Stored XSS.This issue affects Schema & Structured Data for WP & AMP: from n/a through 1.25...

5.4CVSS5.8AI score0.0034EPSS
SaveExploits0References1
NVD
NVD
added 2024/01/31 7:15 p.m.35 views

CVE-2024-22146

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magazine3 Schema & Structured Data for WP & AMP allows Stored XSS.This issue affects Schema & Structured Data for WP & AMP: from n/a through 1.25...

6.5CVSS6.5AI score0.0034EPSS
SaveExploits0References1
Prion
Prion
added 2024/01/31 7:15 p.m.19 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magazine3 Schema & Structured Data for WP & AMP allows Stored XSS.This issue affects Schema & Structured Data for WP & AMP: from n/a through 1.25...

4.9CVSS7AI score0.0034EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/01/31 6:24 p.m.46 views

CVE-2024-22146 WordPress Schema & Structured Data for WP & AMP Plugin <= 1.25 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magazine3 Schema & Structured Data for WP & AMP allows Stored XSS.This issue affects Schema & Structured Data for WP & AMP: from n/a through 1.25...

6.5CVSS6.6AI score0.0034EPSS
SaveExploits0References1
CVE
CVE
added 2024/01/31 6:24 p.m.60 views

CVE-2024-22146

CVE-2024-22146 affects the WordPress plugin Schema & Structured Data for WP & AMP (Magazine3) — versions up to and including 1.25. The root cause is improper input neutralization during web page generation, enabling Stored XSS. A fix exists in version 1.26. Public exploitation details are not pro...

6.5CVSS6.7AI score0.0034EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/01/31 8:15 a.m.6 views

CVE-2024-0836

The WordPress Review & Structure Data Schema Plugin – Review Schema plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the rtrsreviewedit function in all versions up to, and including, 2.1.14. This makes it possible for authenticated...

4.3CVSS7.4AI score0.00428EPSS
SaveExploits0References2
NVD
NVD
added 2024/01/31 8:15 a.m.19 views

CVE-2024-0836

The WordPress Review & Structure Data Schema Plugin – Review Schema plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the rtrsreviewedit function in all versions up to, and including, 2.1.14. This makes it possible for authenticated...

4.3CVSS4.4AI score0.00428EPSS
SaveExploits0References2
Prion
Prion
added 2024/01/31 8:15 a.m.22 views

Design/Logic Flaw

The WordPress Review & Structure Data Schema Plugin – Review Schema plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the rtrsreviewedit function in all versions up to, and including, 2.1.14. This makes it possible for authenticated...

4CVSS6.8AI score0.00428EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/01/31 7:33 a.m.33 views

CVE-2024-0836 WordPress Review & Structure Data Schema Plugin – Review Schema <= 2.1.14 - Missing Authorization to Arbitrary Review Update

The WordPress Review & Structure Data Schema Plugin – Review Schema plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the rtrsreviewedit function in all versions up to, and including, 2.1.14. This makes it possible for authenticated...

4.3CVSS4.7AI score0.00428EPSS
SaveExploits0References2
CVE
CVE
added 2024/01/31 7:33 a.m.79 views

CVE-2024-0836

CVE-2024-0836 relates to the WordPress plugin “Review Schema” (WordPress Review & Structure Data Schema Plugin). The vulnerability is due to a missing capability check in the rtrs_review_edit() function, affecting all versions up to and including 2.1.14. It allows authenticated attackers with sub...

4.3CVSS5.3AI score0.00428EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/31 7:33 a.m.13 views

CVE-2024-0836 WordPress Review & Structure Data Schema Plugin – Review Schema <= 2.1.14 - Missing Authorization to Arbitrary Review Update

The WordPress Review & Structure Data Schema Plugin – Review Schema plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the rtrsreviewedit function in all versions up to, and including, 2.1.14. This makes it possible for authenticated...

4.3CVSS6.8AI score0.00428EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/01/31 12:0 a.m.7 views

WordPress plugin WordPress Review & Structure Data Schema Plugin - Review Schema Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin WordPress Review & Structu...

4.3CVSS6.3AI score0.00428EPSS
SaveExploits0References3
Rows per page
Query Builder