Lucene search
+L

725 matches found

CNNVD
CNNVD
•added 2025/01/31 12:00 a.m.•10 views

WordPress plugin Scroll Styler 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

7.1CVSS8.7AI score0.00149EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/31 12:00 a.m.•20 views

PT-2025-5249 · Unknown · Jablonczay Scroll Styler

Name of the Vulnerable Software and Affected Versions: jablonczay Scroll Styler versions 1.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application...

7.1CVSS9.3AI score0.00149EPSS
SaveExploits0References5
Patchstack
Patchstack
•added 2025/01/27 1:03 p.m.•13 views

WordPress Scroll Styler plugin <= 1.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Scroll Styler versions = 1.1...

7.1CVSS6.2AI score0.00149EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/01/16 8:15 p.m.•14 views

CVE-2025-23444

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nasir179125 Scroll Top Advanced scroll-top-advanced allows Stored XSS.This issue affects Scroll Top Advanced: from n/a through = 2.5...

6.5CVSS0.00368EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/16 8:06 p.m.•61 views

CVE-2025-23444

CVE-2025-23444 describes a Stored XSS in the WordPress plugin “Scroll Top Advanced” due to improper neutralization of input during web page generation. Affected software: Scroll Top Advanced — from n/a through 2.5. The Red Hat and ENISA/EUVD entries corroborate the Cross-site Scripting risk and t...

6.5CVSS7.2AI score0.00368EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/16 8:06 p.m.•28 views

CVE-2025-23444 WordPress Scroll Top Advanced plugin <= 2.5 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nasir179125 Scroll Top Advanced scroll-top-advanced allows Stored XSS.This issue affects Scroll Top Advanced: from n/a through = 2.5...

6.5CVSS0.00368EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/16 8:06 p.m.•7 views

CVE-2025-23444 WordPress Scroll Top Advanced plugin <= 2.5 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nasir179125 Scroll Top Advanced scroll-top-advanced allows Stored XSS.This issue affects Scroll Top Advanced: from n/a through = 2.5...

6.5CVSS8.6AI score0.00368EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/16 6:42 p.m.•18 views

WordPress Scroll Top plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Scroll Top versions = 1.3.3...

7.1CVSS6.1AI score0.00308EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/01/16 6:41 p.m.•9 views

WordPress Track Page Scroll plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Track Page Scroll versions = 1.0.2...

7.1CVSS5.8AI score0.0037EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/01/16 6:41 p.m.•10 views

WordPress Scroll Top Advanced plugin <= 2.5 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Scroll Top Advanced versions = 2.5...

6.5CVSS5.9AI score0.00368EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/16 12:00 a.m.•3 views

CVE-2025-23444: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nasir179125 Scroll Top Advanced scroll-top-advanced allows Stored XSS.This issue affects Scroll Top Advanced: from n/a through = 2.5...

6.5CVSS5.8AI score0.00368EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/16 12:00 a.m.•11 views

WordPress plugin Scroll Top Advanced 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.5CVSS7.4AI score0.00368EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/14 5:48 a.m.•18 views

WordPress CRUDLab Scroll to Top Plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin CRUDLab Scroll to Top versions = 1.0.1...

7.1CVSS6.2AI score0.00288EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2024/12/12 4:15 a.m.•26 views

CVE-2024-11442

The Horizontal scroll image slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'horizontal-scroll-image-slideshow' shortcode in all versions up to, and including, 10.1 due to insufficient input sanitization and output escaping on user supplied attributes...

6.4CVSS0.0045EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/12/12 3:23 a.m.•12 views

CVE-2024-11442 Horizontal scroll image slideshow <= 10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Horizontal scroll image slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'horizontal-scroll-image-slideshow' shortcode in all versions up to, and including, 10.1 due to insufficient input sanitization and output escaping on user supplied attributes...

6.4CVSS5.8AI score0.0045EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2024/12/12 12:27 a.m.•14 views

WordPress Horizontal scroll image slideshow plugin <= 10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Horizontal scroll image slideshow versions = 10.1...

6.4CVSS5.7AI score0.0045EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2024/12/12 12:00 a.m.•15 views

WordPress plugin Horizontal scroll image slideshow 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

6.4CVSS7.5AI score0.0045EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/12 12:00 a.m.•4 views

CVE-2024-11442: Improper Neutralization of Input During Web Page Generation

The Horizontal scroll image slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'horizontal-scroll-image-slideshow' shortcode in all versions up to, and including, 10.1 due to insufficient input sanitization and output escaping on user supplied attributes...

6.4CVSS6AI score0.0045EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/02 2:15 p.m.•25 views

CVE-2024-52492

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gopiplus Image horizontal reel scroll slideshow image-horizontal-reel-scroll-slideshow allows Stored XSS.This issue affects Image horizontal reel scroll slideshow: from n/a through = 13.4...

5.9CVSS0.00319EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/02 1:48 p.m.•59 views

CVE-2024-52492

CVE-2024-52492 details a Stored Cross-Site Scripting (XSS) flaw in the WordPress plugin Image horizontal reel scroll slideshow (versions

5.9CVSS7.2AI score0.00319EPSS
SaveExploits0References1
Rows per page
Query Builder