Lucene search
K

17 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-45663

Malicious code in bioql PyPI...

6.5CVSS8.6AI score0.00295EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:39 a.m.2 views

CVE-2024-51866

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in riponshah Social button social-button allows Stored XSS.This issue affects Social button: from n/a through = 1.3...

6.5CVSS7.2AI score0.00295EPSS
Exploits0References1
NVD
NVD
added 2024/11/19 5:15 p.m.4 views

CVE-2024-51866

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in riponshah Social button social-button allows Stored XSS.This issue affects Social button: from n/a through = 1.3...

6.5CVSS0.00295EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/19 4:31 p.m.12 views

CVE-2024-51866 WordPress Social button plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mr. Riponshah Social button allows Stored XSS.This issue affects Social button: from n/a through 1.3...

6.5CVSS6.7AI score0.00295EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/19 4:31 p.m.11 views

CVE-2024-51866 WordPress Social button plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in riponshah Social button social-button allows Stored XSS.This issue affects Social button: from n/a through = 1.3...

6.5CVSS0.00295EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/19 12:0 a.m.1 views

WordPress plugin Social button 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.6AI score0.00295EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/11/19 12:0 a.m.3 views

PT-2024-34996 · Unknown · Mr. Riponshah Social Button

Name of the Vulnerable Software and Affected Versions: Mr. Riponshah Social button versions n/a through 1.3 Description: The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means an attacker can inject malicious...

6.5CVSS6.1AI score0.00295EPSS
Exploits0References5
Patchstack
Patchstack
added 2024/11/08 2:46 p.m.2 views

WordPress Social button plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Social button versions = 1.3...

6.5CVSS5.8AI score0.00295EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/11/08 12:0 a.m.12 views

WordPress Social button Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)

Software Social button Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51866 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3298adb5e8ae Credits SOPROBRO Required privilege Contributor...

6.5CVSS6.5AI score0.00295EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2016/04/12 12:0 a.m.1 views

LOCKON EC-CUBE Social-button Premium Plugin Cross-Site Scripting Vulnerability

LOCKON EC-CUBE is an open source e-commerce website building platform developed by Japan LOCKON Co. A cross-site scripting vulnerability exists in version 1.0 of the Social-button Premium plugin for LOCKON EC-CUBE 2.13.x. The vulnerability can be exploited to inject arbitrary Web script or HTML. ...

6.1CVSS6.2AI score0.00314EPSS
Exploits0References1
NVD
NVD
added 2016/04/08 3:59 p.m.10 views

CVE-2016-1180

Cross-site scripting XSS vulnerability in the Cyber-Will Social-button Premium plugin before 1.1 for EC-CUBE 2.13.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.1CVSS6AI score0.00314EPSS
Exploits0References4
Prion
Prion
added 2016/04/08 3:59 p.m.13 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Cyber-Will Social-button Premium plugin before 1.1 for EC-CUBE 2.13.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6.2AI score0.00314EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2016/04/08 3:0 p.m.37 views

CVE-2016-1180

The CVE-2016-1180 issue concerns the Cyber-Will EC-CUBE Social-button Premium plugin. A cross-site scripting (XSS) vulnerability exists in the Social-button Premium plugin before version 1.1 for EC-CUBE 2.13.x, allowing remote attackers to inject arbitrary web script or HTML via unspecified vecto...

6.1CVSS6AI score0.00314EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2016/04/08 3:0 p.m.16 views

CVE-2016-1180

Cross-site scripting XSS vulnerability in the Cyber-Will Social-button Premium plugin before 1.1 for EC-CUBE 2.13.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6AI score0.00314EPSS
Exploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2016/04/08 3:31 a.m.1 views

EC-CUBE plugin "Social-button Plugin Premium" and "Social-button Plugin" vulnerable to cross-site scripting

Overview EC-CUBE plugin "Social-button Plugin Premium" and "Social-button Plugin" provided by Cyber-Will Inc. contain a cross-site scripting vulnerability CWE-79. Gen Sato of TRADE WORKS Co.,Ltd. Security Dept. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

6.1CVSS6.1AI score0.00314EPSS
Exploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2016/04/08 12:0 a.m.14 views

JVN#78482127: EC-CUBE plugin "Social-button Plugin Premium" and "Social-button Plugin" vulnerable to cross-site scripting

EC-CUBE plugin "Social-button Plugin Premium" and "Social-button Plugin" provided by Cyber-Will Inc. contain a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to th...

6.1CVSS6AI score0.00314EPSS
Exploits0
securityvulns
securityvulns
added 2011/03/17 12:0 a.m.52 views

HTB22892: Path disclosure in Smen Social Button wordpress plugin

Vulnerability ID: HTB22892 Reference: http://www.htbridge.ch/advisory/pathdisclosureinsmensocialbuttonwordpressplugin.html Product: Smen Social Button wordpress plugin Vendor: Alexandru Dumencu http://smen.ro/ Vulnerable Version: 0.7 Vendor Notification: 03 March 2011 Vulnerability Type: Path...

7AI score
Exploits0
Rows per page
Query Builder