Lucene search
+L

1030 matches found

RedhatCVE
RedhatCVE
•added 2025/02/05 3:21 a.m.•14 views

CVE-2024-51632

Cross-Site Request Forgery CSRF vulnerability in Sam Hoe SH Slideshow sh-slideshow allows Stored XSS.This issue affects SH Slideshow: from n/a through = 4.3...

7.1CVSS5.9AI score0.00202EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 12:28 a.m.•18 views

CVE-2024-31355

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8...

8.5CVSS8.9AI score0.00517EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/09 4:16 p.m.•16 views

CVE-2025-22807

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Robert Responsive Flickr Slideshow mobile-friendly-flickr-slideshow allows Stored XSS.This issue affects Responsive Flickr Slideshow: from n/a through = 2.6.0...

6.5CVSS0.00214EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/09 3:39 p.m.•28 views

CVE-2025-22807 WordPress Responsive Flickr Slideshow Plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Robert Responsive Flickr Slideshow mobile-friendly-flickr-slideshow allows Stored XSS.This issue affects Responsive Flickr Slideshow: from n/a through = 2.6.0...

6.5CVSS0.00214EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/09 3:39 p.m.•61 views

CVE-2025-22807

The CVE-2025-22807 entry concerns the Responsive Flickr Slideshow WordPress plugin (Responsive Flickr Slideshow, affected up to 2.6.0). It describes a Stored XSS vulnerability caused by improper neutralization of input during web page generation. Exploitation could allow attacker-supplied payload...

6.5CVSS7.2AI score0.00214EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/09 12:00 a.m.•12 views

PT-2025-4716 · Unknown · Robert Peake Responsive Flickr Slideshow

Name of the Vulnerable Software and Affected Versions: Robert Peake Responsive Flickr Slideshow versions n/a through 2.6.0 Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting, which allows Stored XSS. This means that...

6.5CVSS6.6AI score0.00214EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/01/09 12:00 a.m.•15 views

WordPress plugin Responsive Flickr Slideshow 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.7AI score0.00214EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/09 12:00 a.m.•3 views

CVE-2025-22807: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Robert Responsive Flickr Slideshow mobile-friendly-flickr-slideshow allows Stored XSS.This issue affects Responsive Flickr Slideshow: from n/a through = 2.6.0...

6.5CVSS5.8AI score0.00214EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/07 10:08 p.m.•11 views

WordPress Responsive Flickr Slideshow Plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 Patchstack Alliance in WordPress Plugin Responsive Flickr Slideshow versions = 2.6.0...

6.5CVSS6.1AI score0.00214EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/01/03 10:09 a.m.•14 views

WordPress Photo Gallery Slideshow & Masonry Tiled Gallery plugin <= 1.0.15 - Authenticated (Subscriber+) Limited Server-Side Request Forgery vulnerability

Authenticated Subscriber+ Limited Server-Side Request Forgery vulnerability discovered by shaman0x01 in WordPress Plugin Photo Gallery Slideshow & Masonry Tiled Gallery versions = 1.0.15...

4.3CVSS7.1AI score0.00383EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/01/03 12:00 a.m.•70 views

PT-2025-1788 · WordPress · The Photo Gallery Slideshow & Masonry Tiled Gallery

Name of the Vulnerable Software and Affected Versions: The Photo Gallery Slideshow & Masonry Tiled Gallery plugin for WordPress versions up to, and including, 1.0.15 Description: The issue allows authenticated attackers with Subscriber-level access and above to make web requests to arbitrary...

4.3CVSS9.3AI score0.00383EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/03 12:00 a.m.•4 views

CVE-2024-12237: Server-Side Request Forgery (SSRF)

The Photo Gallery Slideshow & Masonry Tiled Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0.15 via the rjggetyoutubeinfojustifiedgallerycallback function. This makes it possible for authenticated attackers, with Subscriber-level...

4.3CVSS5.8AI score0.00383EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/03 12:00 a.m.•16 views

WordPress plugin Photo Gallery Slideshow & Masonry Tiled Gallery 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in the...

4.3CVSS8.3AI score0.00383EPSS
SaveExploits0References3
NVD
NVD
•added 2024/12/12 4:15 a.m.•26 views

CVE-2024-11442

The Horizontal scroll image slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'horizontal-scroll-image-slideshow' shortcode in all versions up to, and including, 10.1 due to insufficient input sanitization and output escaping on user supplied attributes...

6.4CVSS0.0045EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/12/12 3:23 a.m.•12 views

CVE-2024-11442 Horizontal scroll image slideshow <= 10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Horizontal scroll image slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'horizontal-scroll-image-slideshow' shortcode in all versions up to, and including, 10.1 due to insufficient input sanitization and output escaping on user supplied attributes...

6.4CVSS5.8AI score0.0045EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2024/12/12 12:27 a.m.•14 views

WordPress Horizontal scroll image slideshow plugin <= 10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Horizontal scroll image slideshow versions = 10.1...

6.4CVSS5.7AI score0.0045EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2024/12/12 12:00 a.m.•14 views

WordPress plugin Horizontal scroll image slideshow 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

6.4CVSS7.5AI score0.0045EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/12 12:00 a.m.•4 views

CVE-2024-11442: Improper Neutralization of Input During Web Page Generation

The Horizontal scroll image slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'horizontal-scroll-image-slideshow' shortcode in all versions up to, and including, 10.1 due to insufficient input sanitization and output escaping on user supplied attributes...

6.4CVSS6AI score0.0045EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/02 2:15 p.m.•25 views

CVE-2024-52492

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gopiplus Image horizontal reel scroll slideshow image-horizontal-reel-scroll-slideshow allows Stored XSS.This issue affects Image horizontal reel scroll slideshow: from n/a through = 13.4...

5.9CVSS0.00319EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/02 1:48 p.m.•59 views

CVE-2024-52492

CVE-2024-52492 details a Stored Cross-Site Scripting (XSS) flaw in the WordPress plugin Image horizontal reel scroll slideshow (versions

5.9CVSS7.2AI score0.00319EPSS
SaveExploits0References1
Rows per page
Query Builder