Lucene search
+L

13 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/10 12:00 a.m.•6 views

CVE-2026-41701: Use of Insufficiently Random Values

Correlation IDs for replies in the RabbitTemplate.sendAndReceive with the fixed reply queue are predictable due to internal simple counter. Affected versions: Spring AMQP 4.0.0 through 4.0.3; 3.2.0 through 3.2.10; 3.1.0 through 3.1.15; 2.4.0 through 2.4.17...

4.4CVSS5.9AI score0.00219EPSS
SaveExploits0References3
OSV
OSV
•added 2026/06/09 11:47 p.m.•6 views

CVE-2026-41701 In Spring AMQP sequential correlation IDs enable reply poisoning on fixed reply queues

Correlation IDs for replies in the RabbitTemplate.sendAndReceive with the fixed reply queue are predictable due to internal simple counter. Affected versions: Spring AMQP 4.0.0 through 4.0.3; 3.2.0 through 3.2.10; 3.1.0 through 3.1.15; 2.4.0 through 2.4.17...

4.4CVSS5.9AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/01/09 9:29 a.m.•13 views

CVE-2023-50377

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AB-WP Simple Counter allows Stored XSS.This issue affects Simple Counter: from n/a through 1.0.2...

5.9CVSS6.7AI score0.00325EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2023-55178

Malicious code in bioql PyPI...

5.9CVSS6.7AI score0.00325EPSS
SaveExploits0References1
OSV
OSV
•added 2023/12/21 3:15 p.m.•14 views

CVE-2023-50377

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AB-WP Simple Counter allows Stored XSS.This issue affects Simple Counter: from n/a through 1.0.2...

5.4CVSS7.3AI score0.00325EPSS
SaveExploits0References1
NVD
NVD
•added 2023/12/21 3:15 p.m.•18 views

CVE-2023-50377

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AB-WP Simple Counter allows Stored XSS.This issue affects Simple Counter: from n/a through 1.0.2...

5.9CVSS0.00325EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/21 3:15 p.m.•27 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AB-WP Simple Counter allows Stored XSS.This issue affects Simple Counter: from n/a through 1.0.2...

4.9CVSS6.9AI score0.00325EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/12/21 2:30 p.m.•32 views

CVE-2023-50377 WordPress Simple Counter Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AB-WP Simple Counter allows Stored XSS.This issue affects Simple Counter: from n/a through 1.0.2...

5.9CVSS5.9AI score0.00325EPSS
SaveExploits0References1
CVE
CVE
•added 2023/12/21 2:30 p.m.•87 views

CVE-2023-50377

CVE-2023-50377 is a Stored XSS in AB-WP Simple Counter (affecting versions from n/a through 1.0.2) due to improper neutralization of input during web page generation; no remediation details are provided in the initial document.

5.9CVSS6.7AI score0.00325EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/12/21 12:00 a.m.•13 views

PT-2023-31543 · WordPress · Ab-Wp Simple Counter

Name of the Vulnerable Software and Affected Versions: AB-WP Simple Counter versions 1.0.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

5.9CVSS6AI score0.00325EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/21 12:00 a.m.•3 views

CVE-2023-50377: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AB-WP Simple Counter allows Stored XSS.This issue affects Simple Counter: from n/a through 1.0.2...

5.9CVSS6AI score0.00325EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/12/21 12:00 a.m.•15 views

WordPress plugin Simple Counter cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.9CVSS6.1AI score0.00325EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2023/12/19 12:00 a.m.•19 views

WordPress Simple Counter Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)

Software Simple Counter Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-50377 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 1fb7d6a42ed0 Credits Khalid Yusuf Required privilege...

5.9CVSS6.6AI score0.00325EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder