Lucene search
+L

145 matches found

Vulnrichment
Vulnrichment
•added 2025/11/21 7:31 a.m.•8 views

CVE-2025-11765 Stock Tools <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Stock Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'imageheight' and 'imagewidth' shortcode attributes in all versions up to, and including, 1.1. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS6.1AI score0.00226EPSS
SaveExploits0References2
CVE
CVE
•added 2025/11/13 8:27 a.m.•36 views

CVE-2025-10295

CVE-2025-10295 affects the Angel – Fashion Model Agency WordPress Theme (versions up to and including 3.2.3). The vulnerability is a Stored Cross-Site Scripting flaw in the profile media uploader caused by insufficient input sanitization and output escaping. It requires authenticated access at su...

6.4CVSS6AI score0.0018EPSS
SaveExploits0References2
NVD
NVD
•added 2025/11/06 4:15 p.m.•19 views

CVE-2025-48085

Cross-Site Request Forgery CSRF vulnerability in ZIPANG Simple Stripe simple-stripe allows Stored XSS.This issue affects Simple Stripe: from n/a through = 0.9.17...

7.1CVSS0.00127EPSS
SaveExploits0References1
OSV
OSV
•added 2025/11/05 5:15 p.m.•34 views

CVE-2025-20304

Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

5.4CVSS6.1AI score0.00212EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/05 12:15 p.m.•31 views

CVE-2025-11745

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom field through the plugin's 'adinserter' shortcode in all versions up to, and including, 2.8.7 due to insufficient input sanitization and output escaping on user supplied...

6.4CVSS0.00231EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2013-2024

Malware in sbrugna...

3.5CVSS6.1AI score0.01152EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2006-0081

Malware in sbrugna...

4.3CVSS6.4AI score0.01685EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2008-1916

Malware in sbrugna...

4.3CVSS6.4AI score0.01022EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2008-1261

Malware in sbrugna...

4.3CVSS6.4AI score0.00965EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2009-4352

Malware in sbrugna...

4.3CVSS6.4AI score0.01484EPSS
SaveExploits2References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2013-5245

Malware in sbrugna...

3.5CVSS6.4AI score0.00946EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2006-1265

Malware in sbrugna...

4.3CVSS6.4AI score0.0137EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2006-0450

Malware in sbrugna...

4.3CVSS6.4AI score0.02126EPSS
SaveExploits2References9
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2015-6877

Malware in sbrugna...

4.3CVSS6.4AI score0.03487EPSS
SaveExploits3References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2006-4349

Malware in sbrugna...

4.3CVSS6.4AI score0.01299EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2006-4771

Malware in sbrugna...

4.3CVSS6.2AI score0.01184EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2025-28748

Malicious code in bioql PyPI...

6.4CVSS6.4AI score0.00248EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•27 views

EUVD-2025-21868

Malicious code in bioql PyPI...

5.3CVSS6.6AI score0.00376EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2023-41409

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00413EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/03 12:00 a.m.•13 views

Redis 资源管理错误漏洞

Redis is an open source, ANSI C, network-enabled, memory-based, persistent logging, key-value Key-Value storage database from Redis, Inc. and provides APIs in multiple languages. A resource management error vulnerability exists in Redis 8.2.1 and earlier versions, which stems from a specially...

9.9CVSS8.3AI score0.82294EPSS
SaveExploits14References4
Rows per page
Query Builder