Lucene search
K

35 matches found

EUVD
EUVD
added 2025/12/30 12:30 p.m.4 views

EUVD-2025-205735

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Inboxify Inboxify Sign Up Form inboxify-sign-up-form allows Stored XSS.This issue affects Inboxify Sign Up Form: from n/a through = 1.0.4...

5.9CVSS5.5AI score0.00172EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-21584

Malware in sbrugna...

6.1CVSS6.3AI score0.01533EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2021-30373

Malicious code in bioql PyPI...

10CVSS7AI score0.0344EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2021-30374

Malicious code in bioql PyPI...

5.3CVSS5.7AI score0.01218EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-4846

Malicious code in bioql PyPI...

6.5CVSS9.2AI score0.00359EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2021-30371

Malicious code in bioql PyPI...

5.4CVSS5.8AI score0.00664EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/22 9:35 p.m.6 views

CVE-2021-43441

An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form...

5.3CVSS7.4AI score0.01218EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 3:28 p.m.8 views

CVE-2020-29205

XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field...

6.1CVSS6.5AI score0.01533EPSS
Exploits1
OSV
OSV
added 2025/02/18 5:15 a.m.4 views

CVE-2024-13595

The Simple Signup Form plugin for WordPress is vulnerable to SQL Injection via the 'id' attribute of the 'ssf' shortcode in all versions up to, and including, 1.6.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes...

6.5CVSS7.3AI score0.00359EPSS
Exploits0References2
NVD
NVD
added 2025/02/18 5:15 a.m.16 views

CVE-2024-13595

The Simple Signup Form plugin for WordPress is vulnerable to SQL Injection via the 'id' attribute of the 'ssf' shortcode in all versions up to, and including, 1.6.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes...

6.5CVSS0.00359EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/02/18 4:21 a.m.6 views

CVE-2024-13595 Simple Signup Form <= 1.6.5 - Authenticated (Contributor+) SQL Injection

The Simple Signup Form plugin for WordPress is vulnerable to SQL Injection via the 'id' attribute of the 'ssf' shortcode in all versions up to, and including, 1.6.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes...

6.5CVSS7.3AI score0.00359EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/02/18 4:21 a.m.9 views

CVE-2024-13595 Simple Signup Form <= 1.6.5 - Authenticated (Contributor+) SQL Injection

The Simple Signup Form plugin for WordPress is vulnerable to SQL Injection via the 'id' attribute of the 'ssf' shortcode in all versions up to, and including, 1.6.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes...

6.5CVSS0.00359EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/02/18 12:0 a.m.2 views

WordPress plugin Simple Signup Form SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A SQL injection...

6.5CVSS9.3AI score0.00359EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/02/17 9:57 p.m.5 views

WordPress Simple Signup Form plugin <= 1.6.5 - Authenticated (Contributor+) SQL Injection vulnerability

Authenticated Contributor+ SQL Injection vulnerability discovered by Peter Thaleikis in WordPress Plugin Simple Signup Form versions = 1.6.5...

6.5CVSS8.1AI score0.00359EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2021/12/20 8:15 p.m.11 views

CVE-2021-43440

Multiple Stored XSS Vulnerabilities in the Source Code of iOrder 1.0 allow remote attackers to execute arbitrary code via signup form in the Name and Phone number field...

6.1CVSS0.01393EPSS
Exploits0References2
NVD
NVD
added 2021/12/20 8:15 p.m.15 views

CVE-2021-43441

An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form...

5.3CVSS0.01218EPSS
Exploits0References2
NVD
NVD
added 2021/12/20 8:15 p.m.10 views

CVE-2021-43438

Stored XSS in Signup Form in iResturant 1.0 Allows Remote Attacker to Inject Arbitrary code via NAME and ADDRESS field...

5.4CVSS0.00664EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2021/12/20 8:15 p.m.4 views

CVE-2021-43440

Multiple Stored XSS Vulnerabilities in the Source Code of iOrder 1.0 allow remote attackers to execute arbitrary code via signup form in the Name and Phone number field...

10CVSS7.3AI score0.0344EPSS
Exploits0References4
OSV
OSV
added 2021/12/20 8:15 p.m.4 views

CVE-2021-43441

An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form...

5.3CVSS6.2AI score0.01218EPSS
Exploits0References2
OSV
OSV
added 2021/12/20 8:15 p.m.5 views

CVE-2021-43438

Stored XSS in Signup Form in iResturant 1.0 Allows Remote Attacker to Inject Arbitrary code via NAME and ADDRESS field...

5.4CVSS6.1AI score0.00664EPSS
Exploits0References2
Rows per page
Query Builder