Lucene search
+L

144 matches found

Positive Technologies
Positive Technologies
•added 2024/11/19 12:00 a.m.•14 views

PT-2024-34777 · Ivycat Web Services · Ivycat Web Services Simple Page Specific Sidebars

Name of the Vulnerable Software and Affected Versions: IvyCat Web Services Simple Page Specific Sidebars versions through 2.14.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in IvyCat Web Services Simple Page Specific Sidebars. Recommendations:...

7.1CVSS6.1AI score0.00202EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•3 views

CVE-2024-51633: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ivycat Simple Page Specific Sidebars page-specific-sidebars allows Stored XSS.This issue affects Simple Page Specific Sidebars: from n/a through = 2.14.1...

7.1CVSS5.8AI score0.00202EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/11/01 8:17 a.m.•13 views

WordPress Simple Page Specific Sidebars plugin <= 2.14.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

CSRF to Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Simple Page Specific Sidebars versions = 2.14.1...

7.1CVSS5.8AI score0.00202EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/11/01 12:00 a.m.•21 views

WordPress Simple Page Specific Sidebars Plugin <= 2.14.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Simple Page Specific Sidebars Type Plugin Vulnerable versions = 2.14.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51633 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a77d8baa7835 Credits...

7.1CVSS6.5AI score0.00202EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2024/03/27 2:15 p.m.•37 views

CVE-2024-29762

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus Slidebars allows Stored XSS.This issue affects Off-Canvas Sidebars & Menus Slidebars: from n/a through 0.5.8.1...

6.5CVSS6.4AI score0.00351EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/27 1:13 p.m.•45 views

CVE-2024-29762 WordPress Off-Canvas Sidebars & Menus (Slidebars) plugin <= 0.5.8.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus Slidebars allows Stored XSS.This issue affects Off-Canvas Sidebars & Menus Slidebars: from n/a through 0.5.8.1...

6.5CVSS6.6AI score0.00351EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/27 1:13 p.m.•79 views

CVE-2024-29762

CVE-2024-29762 is a Stored XSS in the WordPress plugin Off-Canvas Sidebars & Menus (Slidebars) due to improper input neutralization during web page generation. Affected versions are up to and including 0.5.8.1 (vendor states vulnerability exists from n/a through 0.5.8.1). Root cause: improper neu...

6.5CVSS8.6AI score0.00351EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/27 12:00 a.m.•3 views

CVE-2024-29762: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus Slidebars allows Stored XSS.This issue affects Off-Canvas Sidebars & Menus Slidebars: from n/a through 0.5.8.1...

6.5CVSS5.8AI score0.00351EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/27 12:00 a.m.•18 views

WordPress Plugin Off-Canvas Sidebars & Menus 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.5CVSS7AI score0.00351EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/27 12:00 a.m.•18 views

PT-2024-23003 · Unknown · Off-Canvas Sidebars & Menus

Name of the Vulnerable Software and Affected Versions: Off-Canvas Sidebars & Menus Slidebars versions 0.5.8.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker...

6.5CVSS8.9AI score0.00351EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2024/03/25 12:00 a.m.•22 views

WordPress Off-Canvas Sidebars & Menus (Slidebars) Plugin <= 0.5.8.1 is vulnerable to Cross Site Scripting (XSS)

Software Off-Canvas Sidebars & Menus Slidebars Type Plugin Vulnerable versions = 0.5.8.1 Fixed in 0.5.8.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29762 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID aaadebb866ec Credits LVT-tholv2k...

6.5CVSS6.9AI score0.00351EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2023/08/17 11:15 a.m.•21 views

CVE-2023-31091

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Pradeep Singh Dynamically Register Sidebars plugin = 1.0.1 versions...

4.8CVSS7.3AI score0.00369EPSS
SaveExploits0References1
NVD
NVD
•added 2023/08/17 11:15 a.m.•39 views

CVE-2023-31091

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Pradeep Singh Dynamically Register Sidebars plugin = 1.0.1 versions...

5.9CVSS5.4AI score0.00369EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/08/17 10:46 a.m.•13 views

CVE-2023-31091 WordPress Dynamically Register Sidebars Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Pradeep Singh Dynamically Register Sidebars plugin = 1.0.1 versions...

5.9CVSS5.6AI score0.00369EPSS
SaveExploits0References1
CVE
CVE
•added 2023/08/17 10:46 a.m.•44 views

CVE-2023-31091

CVE-2023-31091 affects the WordPress plugin Dynamically Register Sidebars (versions

5.9CVSS5AI score0.00369EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/08/17 10:46 a.m.•37 views

CVE-2023-31091 WordPress Dynamically Register Sidebars Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Pradeep Singh Dynamically Register Sidebars plugin = 1.0.1 versions...

5.9CVSS5.5AI score0.00369EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/08/17 12:00 a.m.•22 views

WordPress plugin Dynamically Register Sidebars 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.9CVSS6.4AI score0.00369EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/17 12:00 a.m.•5 views

CVE-2023-31091: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Pradeep Singh Dynamically Register Sidebars plugin = 1.0.1 versions...

5.9CVSS6.6AI score0.00369EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2023/07/18 12:00 a.m.•20 views

WordPress Content Aware Sidebars Plugin < 3.19.1 is vulnerable to Cross Site Scripting (XSS)

Software Content Aware Sidebars Type Plugin Vulnerable versions 3.19.1 Fixed in 3.19.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer DEV Institute PSID 7045acf9eb4c Credits Rafie Muhammad Patchstack...

6.8AI score0.00272EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
•added 2023/07/18 12:00 a.m.•10 views

WordPress Content Sidebars Plugin <= 1.6.8 is vulnerable to Cross Site Scripting (XSS)

Software Content Sidebars Type Plugin Vulnerable versions = 1.6.8 Fixed in 1.7.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 88f4d3ff009b Credits Rafie Muhammad Patchstack...

6.2AI score0.00272EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder