Lucene search
+L

3 matches found

Nuclei
Nuclei
•added 2026/10/04 2:38 a.m.•21 views

Simple Certain Time to Show Content - Cross-Site Scripting

Simple Certain Time to Show Content WordPress plugin 1.3.1 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute arbitrary scripts in the context of high privilege users such as admin, explo...

7.1CVSS8.1AI score0.0063EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/26 12:00 a.m.•2 views

CVE-2024-10152: Improper Neutralization of Input During Web Page Generation

The Simple Certain Time to Show Content WordPress plugin before 1.3.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS5.9AI score0.0063EPSS
SaveExploits1References1
Patchstack
Patchstack
•added 2025/02/12 10:22 p.m.•14 views

WordPress Simple Certain Time to Show Content plugin <= 1.2.2 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Bob Matyas in WordPress Plugin Simple Certain Time to Show Content versions = 1.2.2...

7.1CVSS6.3AI score0.0063EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder