Lucene search
+L

4690 matches found

OSV
OSV
added 2023/11/08 7:15 p.m.11 views

CVE-2023-47228

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Muneeb Layer Slider plugin = 1.1.9.7 versions...

4.8CVSS7.3AI score0.00394EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/08 7:15 p.m.27 views

CVE-2023-47228

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Muneeb Layer Slider plugin = 1.1.9.7 versions...

5.9CVSS0.00394EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/08 7:15 p.m.23 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Muneeb Layer Slider plugin = 1.1.9.7 versions...

4.3CVSS5.8AI score0.00394EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/08 6:46 p.m.41 views

CVE-2023-47228 WordPress Layer Slider Plugin <= 1.1.9.7 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Muneeb Layer Slider plugin = 1.1.9.7 versions...

5.9CVSS5.1AI score0.00394EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/11/08 6:46 p.m.21 views

CVE-2023-47228 WordPress Layer Slider Plugin <= 1.1.9.7 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Muneeb Layer Slider plugin = 1.1.9.7 versions...

5.9CVSS5.8AI score0.00394EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/08 6:46 p.m.82 views

CVE-2023-47228

CVE-2023-47228 : WordPress Layer Slider plugin (v

5.9CVSS4.9AI score0.00394EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/11/08 12:00 a.m.10 views

WordPress Plugin slider-slideshow Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

4.8CVSS6AI score0.00394EPSS
SaveExploits0References3
NVD
NVD
added 2023/11/07 6:15 p.m.27 views

CVE-2023-28499

Auth. author+ Stored Cross-Site Scripting XSS vulnerability in simonpedge Slide Anything – Responsive Content / HTML Slider and Carousel plugin = 2.4.9 versions...

5.4CVSS0.00473EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/07 6:15 p.m.29 views

Cross site scripting

Auth. author+ Stored Cross-Site Scripting XSS vulnerability in simonpedge Slide Anything – Responsive Content / HTML Slider and Carousel plugin = 2.4.9 versions...

4.9CVSS5.7AI score0.00473EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/11/07 5:34 p.m.66 views

CVE-2023-28499

CVE-2023-28499 affects the WordPress plugin Slide Anything – Responsive Content / HTML Slider and Carousel . Vulnerable versions:

5.4CVSS5.2AI score0.00473EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/11/07 12:00 a.m.37 views

WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to PHP Object Injection

Software Master Slider Pro Type Plugin Vulnerable versions = 3.6.5 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2023-47507 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 6df26bc223e4 Credits Rafie Muhammad Patchstack Required...

9.8CVSS6.8AI score0.00388EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/11/07 12:00 a.m.19 views

WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to SQL Injection

Software Master Slider Pro Type Plugin Vulnerable versions = 3.6.5 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-47506 Patch priority High CVSS severity High 7.6 Developer Claim ownership PSID c8ae4f7ba318 Credits Rafie Muhammad Patchstack Required privilege...

8.8CVSS6.8AI score0.00697EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/11/07 12:00 a.m.18 views

WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to Cross Site Scripting (XSS)

Software Master Slider Pro Type Plugin Vulnerable versions = 3.6.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-47508 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 7401df79a69d Credits Rafie Muhammad Patchstack Required...

7.1CVSS6.5AI score0.00412EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/11/03 1:15 p.m.5 views

CVE-2023-5945

The video carousel slider with lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect nonce validation on the responsivevideogallerywithlightboxvideomanagementfunc function. This makes it possible for unauthenticated attackers...

5.4CVSS5.7AI score0.00306EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2023/11/03 1:15 p.m.6 views

CVE-2023-5707

The SEO Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slider' shortcode and post meta in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

5.4CVSS6.7AI score0.00532EPSS
SaveExploits1References4
NVD
NVD
added 2023/11/03 1:15 p.m.20 views

CVE-2023-5945

The video carousel slider with lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect nonce validation on the responsivevideogallerywithlightboxvideomanagementfunc function. This makes it possible for unauthenticated attackers...

5.4CVSS4.5AI score0.00306EPSS
SaveExploits1References3
NVD
NVD
added 2023/11/03 1:15 p.m.20 views

CVE-2023-5707

The SEO Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slider' shortcode and post meta in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS5.7AI score0.00532EPSS
SaveExploits1References4
Prion
Prion
added 2023/11/03 1:15 p.m.21 views

Cross site scripting

The SEO Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slider' shortcode and post meta in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

4.9CVSS5.6AI score0.00532EPSS
SaveExploits1References4Affected Software1
Prion
Prion
added 2023/11/03 1:15 p.m.31 views

Cross site request forgery (csrf)

The video carousel slider with lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect nonce validation on the responsivevideogallerywithlightboxvideomanagementfunc function. This makes it possible for unauthenticated attackers...

5.8CVSS6.1AI score0.00306EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/11/03 12:31 p.m.29 views

CVE-2023-5707 SEO Slider <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The SEO Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slider' shortcode and post meta in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS5.8AI score0.00532EPSS
SaveExploits1References4
Rows per page
Query Builder