Lucene search
+L

5205 matches found

NVD
NVD
•added 2024/02/01 11:15 a.m.•45 views

CVE-2023-51677

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magazine3 Schema & Structured Data for WP & AMP allows Stored XSS.This issue affects Schema & Structured Data for WP & AMP: from n/a through 1.23...

6.5CVSS6.5AI score0.00328EPSS
SaveExploits0References1
Prion
Prion
•added 2024/02/01 11:15 a.m.•31 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magazine3 Schema & Structured Data for WP & AMP allows Stored XSS.This issue affects Schema & Structured Data for WP & AMP: from n/a through 1.23...

4.9CVSS7AI score0.00328EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2024/02/01 10:28 a.m.•73 views

CVE-2023-51677

CVE-2023-51677 is a Stored Cross-Site Scripting vulnerability in the WordPress plugin Schema & Structured Data for WP & AMP . Root cause: improper input neutralization during web page generation. Affected versions:

6.5CVSS6.7AI score0.00328EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/02/01 10:28 a.m.•19 views

CVE-2023-51677 WordPress Schema & Structured Data for WP & AMP Plugin <= 1.23 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magazine3 Schema & Structured Data for WP & AMP allows Stored XSS.This issue affects Schema & Structured Data for WP & AMP: from n/a through 1.23...

6.5CVSS6.7AI score0.00328EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/02/01 10:28 a.m.•57 views

CVE-2023-51677 WordPress Schema & Structured Data for WP & AMP Plugin <= 1.23 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magazine3 Schema & Structured Data for WP & AMP allows Stored XSS.This issue affects Schema & Structured Data for WP & AMP: from n/a through 1.23...

6.5CVSS6.6AI score0.00328EPSS
SaveExploits0References1
Veracode
Veracode
•added 2024/02/01 9:37 a.m.•28 views

Server-Side Request Forgery

github.com/apache/servicecomb-service-center is vulnerable to Server-Side Request Forgery. The vulnerability is due to server.go because there is improper validation for user-supplied URLs or IP addresses that the service accesses for schema validation purposes. An attacker can craft a request an...

7.6CVSS6.7AI score0.0346EPSS
SaveExploits0References7Affected Software1
Positive Technologies
Positive Technologies
•added 2024/02/01 12:00 a.m.•19 views

PT-2024-14235 · Unknown · Magazine3 Schema & Structured Data For Wp & Amp

Name of the Vulnerable Software and Affected Versions: Magazine3 Schema & Structured Data for WP & AMP versions 1.23 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means an attack...

6.5CVSS5.9AI score0.00328EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2024/02/01 12:00 a.m.•23 views

WordPress plugin Schema & Structured Data for WP & AMP Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.5CVSS6.2AI score0.00328EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/01 12:00 a.m.•9 views

CVE-2023-51677: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magazine3 Schema & Structured Data for WP & AMP allows Stored XSS.This issue affects Schema & Structured Data for WP & AMP: from n/a through 1.23...

6.5CVSS5.8AI score0.00328EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/01/31 7:15 p.m.•19 views

CVE-2024-22146

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magazine3 Schema & Structured Data for WP & AMP allows Stored XSS.This issue affects Schema & Structured Data for WP & AMP: from n/a through 1.25...

5.4CVSS5.8AI score0.0034EPSS
SaveExploits0References1
NVD
NVD
•added 2024/01/31 7:15 p.m.•47 views

CVE-2024-22146

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magazine3 Schema & Structured Data for WP & AMP allows Stored XSS.This issue affects Schema & Structured Data for WP & AMP: from n/a through 1.25...

6.5CVSS6.5AI score0.0034EPSS
SaveExploits0References1
Prion
Prion
•added 2024/01/31 7:15 p.m.•26 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magazine3 Schema & Structured Data for WP & AMP allows Stored XSS.This issue affects Schema & Structured Data for WP & AMP: from n/a through 1.25...

4.9CVSS7AI score0.0034EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2024/01/31 6:24 p.m.•76 views

CVE-2024-22146

CVE-2024-22146 affects the WordPress plugin Schema & Structured Data for WP & AMP (Magazine3) — versions up to and including 1.25. The root cause is improper input neutralization during web page generation, enabling Stored XSS. A fix exists in version 1.26. Public exploitation details are not pro...

6.5CVSS6.7AI score0.0034EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/01/31 6:24 p.m.•57 views

CVE-2024-22146 WordPress Schema & Structured Data for WP & AMP Plugin <= 1.25 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magazine3 Schema & Structured Data for WP & AMP allows Stored XSS.This issue affects Schema & Structured Data for WP & AMP: from n/a through 1.25...

6.5CVSS6.6AI score0.0034EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/01/31 8:15 a.m.•20 views

CVE-2024-0836

The WordPress Review & Structure Data Schema Plugin – Review Schema plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the rtrsreviewedit function in all versions up to, and including, 2.1.14. This makes it possible for authenticated...

4.3CVSS7.4AI score0.00425EPSS
SaveExploits0References2
NVD
NVD
•added 2024/01/31 8:15 a.m.•26 views

CVE-2024-0836

The WordPress Review & Structure Data Schema Plugin – Review Schema plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the rtrsreviewedit function in all versions up to, and including, 2.1.14. This makes it possible for authenticated...

4.3CVSS4.4AI score0.00425EPSS
SaveExploits0References2
Prion
Prion
•added 2024/01/31 8:15 a.m.•30 views

Design/Logic Flaw

The WordPress Review & Structure Data Schema Plugin – Review Schema plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the rtrsreviewedit function in all versions up to, and including, 2.1.14. This makes it possible for authenticated...

4CVSS6.8AI score0.00425EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2024/01/31 7:33 a.m.•41 views

CVE-2024-0836 WordPress Review & Structure Data Schema Plugin – Review Schema <= 2.1.14 - Missing Authorization to Arbitrary Review Update

The WordPress Review & Structure Data Schema Plugin – Review Schema plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the rtrsreviewedit function in all versions up to, and including, 2.1.14. This makes it possible for authenticated...

4.3CVSS4.7AI score0.00425EPSS
SaveExploits0References2
CVE
CVE
•added 2024/01/31 7:33 a.m.•97 views

CVE-2024-0836

CVE-2024-0836 relates to the WordPress plugin “Review Schema” (WordPress Review & Structure Data Schema Plugin). The vulnerability is due to a missing capability check in the rtrs_review_edit() function, affecting all versions up to and including 2.1.14. It allows authenticated attackers with sub...

4.3CVSS5.3AI score0.00425EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/31 7:33 a.m.•15 views

CVE-2024-0836 WordPress Review & Structure Data Schema Plugin – Review Schema <= 2.1.14 - Missing Authorization to Arbitrary Review Update

The WordPress Review & Structure Data Schema Plugin – Review Schema plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the rtrsreviewedit function in all versions up to, and including, 2.1.14. This makes it possible for authenticated...

4.3CVSS6.8AI score0.00425EPSS
SaveExploits0References2
Rows per page
Query Builder