Lucene search
+L

4697 matches found

Vulnrichment
Vulnrichment
added 2024/06/28 6:00 a.m.14 views

CVE-2024-5729 Simple AL Slider <= 1.2.10 - Reflected XSS

The Simple AL Slider WordPress plugin through 1.2.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6AI score0.00475EPSS
SaveExploits4References1
CVE
CVE
added 2024/06/28 6:00 a.m.70 views

CVE-2024-5729

CVE-2024-5729 affects WordPress Simple AL Slider plugin up to version 1.2.10. The issue is a reflected XSS caused by insufficient sanitisation/escaping of a parameter before echoing it on the page, which could be exploited against high-privilege users (e.g., admins). Red Hat confirms the same vul...

6.1CVSS6.1AI score0.00475EPSS
SaveExploits4References1Affected Software1
Cvelist
Cvelist
added 2024/06/28 6:00 a.m.42 views

CVE-2024-5729 Simple AL Slider <= 1.2.10 - Reflected XSS

The Simple AL Slider WordPress plugin through 1.2.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

0.00475EPSS
SaveExploits4References1
Patchstack
Patchstack
added 2024/06/28 12:00 a.m.24 views

WordPress Slider Revolution Plugin <= 6.7.13 is vulnerable to Cross Site Scripting (XSS)

Software Slider Revolution Type Plugin Vulnerable versions = 6.7.13 Fixed in 6.7.14 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37449 Patch priority Low CVSS severity Low 5.9 Developer ThemePunch PSID 0c45389d2eaa Credits wcraft Required privilege Administrator...

5.9CVSS6.6AI score0.0026EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/06/28 12:00 a.m.13 views

PT-2024-37105 · WordPress · Simple Al Slider

Name of the Vulnerable Software and Affected Versions: Simple AL Slider WordPress plugin versions prior to 1.2.11 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in the...

6.1CVSS5.9AI score0.00475EPSS
SaveExploits4References3
Patchstack
Patchstack
added 2024/06/28 12:00 a.m.18 views

WordPress Depicter Slider Plugin <= 3.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Depicter Slider Type Plugin Vulnerable versions = 3.0.2 Fixed in 3.1.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37414 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a3581769d268 Credits Steven Julian Required privilege Edito...

5.9CVSS6.6AI score0.00259EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/06/28 12:00 a.m.10 views

WordPress plugin Simple AL Slider security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.1CVSS6.8AI score0.00475EPSS
SaveExploits4References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:48 p.m.8 views

Malicious code in anything_slider (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:48 p.m.12 views

Malicious code in anything-slider_rails (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
OSV
OSV
added 2024/06/25 1:19 p.m.9 views

MAL-2024-3838 Malicious code in vue-netflix-slider (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:19 p.m.3 views

Malicious code in vue-netflix-slider (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0References1
NVD
NVD
added 2024/06/21 1:15 p.m.24 views

CVE-2024-35762

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Cryout Creations Serious Slider allows Stored XSS.This issue affects Serious Slider: from n/a through 1.2.4...

6.5CVSS0.00276EPSS
SaveExploits0References1
OSV
OSV
added 2024/06/21 1:15 p.m.8 views

CVE-2024-35762

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Cryout Creations Serious Slider allows Stored XSS.This issue affects Serious Slider: from n/a through 1.2.4...

5.4CVSS5.8AI score0.00276EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/21 12:35 p.m.64 views

CVE-2024-35762

CVE-2024-35762 is a Stored Cross-Site Scripting issue in Cryout Creations Serious Slider for WordPress, affecting Serious Slider 1.2.4 and earlier. Root cause: improper neutralization of input during web page generation. Impact: stored XSS could enable an attacker with Editor access to inject scr...

6.5CVSS6.2AI score0.00276EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/21 12:35 p.m.16 views

CVE-2024-35762 WordPress Serious Slider plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Cryout Creations Serious Slider allows Stored XSS.This issue affects Serious Slider: from n/a through 1.2.4...

6.5CVSS6.8AI score0.00276EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/06/21 12:00 a.m.12 views

WordPress plugin Serious Slider cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6.2AI score0.00276EPSS
SaveExploits0References2
NVD
NVD
added 2024/06/20 3:15 p.m.37 views

CVE-2024-37222

Cross Site Scripting XSS vulnerability in Averta Master Slider allows Reflected XSS.This issue affects Master Slider: from n/a through 3.10.0...

7.1CVSS0.00327EPSS
SaveExploits0References1
OSV
OSV
added 2024/06/20 3:15 p.m.7 views

CVE-2024-37222

Cross Site Scripting XSS vulnerability in Averta Master Slider allows Reflected XSS.This issue affects Master Slider: from n/a through 3.10.0...

6.1CVSS5.8AI score0.00327EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/06/20 2:28 p.m.10 views

WordPress Transition Slider – Responsive Image Slider and Gallery plugin <= 2.20.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Steven Julian Patchstack Alliance in WordPress Plugin Transition Slider – Responsive Image Slider and Gallery versions = 2.20.3...

5.9CVSS6.1AI score0.00259EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
added 2024/06/20 2:12 p.m.41 views

CVE-2024-37222 WordPress Master Slider plugin <= 3.10.0 - Reflected Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability in Averta Master Slider allows Reflected XSS.This issue affects Master Slider: from n/a through 3.10.0...

7.1CVSS0.00327EPSS
SaveExploits0References1
Rows per page
Query Builder