Lucene search
+L

125 matches found

NVD
NVD
•added 2024/03/27 1:15 p.m.•38 views

CVE-2024-29811

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SoftLab Radio Player allows Stored XSS.This issue affects Radio Player: from n/a through 2.0.73...

6.5CVSS6.4AI score0.00336EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/27 1:15 p.m.•36 views

CVE-2024-29771

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SoftLab Dracula Dark Mode - The Revolutionary Dark Mode Plugin For WordPress allows Stored XSS.This issue affects Dracula Dark Mode - The Revolutionary Dark Mode Plugin For WordPress: from n/a...

6.5CVSS6.5AI score0.00331EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/27 12:58 p.m.•29 views

CVE-2024-29771 WordPress Dracula Dark Mode plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SoftLab Dracula Dark Mode - The Revolutionary Dark Mode Plugin For WordPress allows Stored XSS.This issue affects Dracula Dark Mode - The Revolutionary Dark Mode Plugin For WordPress: from n/a...

6.5CVSS6.5AI score0.00331EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/27 12:58 p.m.•108 views

CVE-2024-29771

CVE-2024-29771 — Dracula Dark Mode (WordPress plugin) stores cross-site scripting via improper input neutralization during web page generation. Affected: Dracula Dark Mode — The Revolutionary Dark Mode Plugin For WordPress; versions includes from n/a through 1.0.8. The connected documents confirm...

6.5CVSS8.6AI score0.00331EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/27 12:11 p.m.•50 views

CVE-2024-29811 WordPress Radio Player plugin <= 2.0.73 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SoftLab Radio Player allows Stored XSS.This issue affects Radio Player: from n/a through 2.0.73...

6.5CVSS6.6AI score0.00336EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/03/27 12:00 a.m.•24 views

PT-2024-23057 · Softlab · Softlab Radio Player

Name of the Vulnerable Software and Affected Versions: SoftLab Radio Player versions 2.0.73 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that an attacker can inject...

6.5CVSS6AI score0.00336EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/27 12:00 a.m.•8 views

CVE-2024-29811: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SoftLab Radio Player allows Stored XSS.This issue affects Radio Player: from n/a through 2.0.73...

6.5CVSS5.8AI score0.00336EPSS
SaveExploits0References2
NVD
NVD
•added 2024/03/26 1:15 p.m.•23 views

CVE-2024-2906

Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73...

6.5CVSS6.5AI score0.00482EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/26 12:25 p.m.•99 views

CVE-2024-2906

CVE-2024-2906 describes a Missing Authorization vulnerability in SoftLab Radio Player (WordPress Radio Player plugin). Publicly available refs corroborate the issue affecting Radio Player versions up to 2.0.73. The Red Hat security entry mirrors the description and notes the affected product as R...

6.5CVSS8.6AI score0.00482EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/26 12:25 p.m.•37 views

CVE-2024-2906 WordPress Radio Player plugin <= 2.0.73 - Unauthenticated Broken Access Control vulnerability

Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73...

6.5CVSS6.7AI score0.00482EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/26 12:00 a.m.•8 views

CVE-2024-2906: Missing Authorization

Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73...

6.5CVSS5.8AI score0.00482EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/26 12:00 a.m.•9 views

PT-2024-22694

Name of the Vulnerable Software and Affected Versions SoftLab Radio Player versions 2.0.73 and earlier Description The issue is related to a Missing Authorization vulnerability in SoftLab Radio Player. Recommendations For SoftLab Radio Player versions 2.0.73 and earlier, at the moment, there is n...

6.5CVSS5.9AI score0.00482EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2023/12/17 10:15 a.m.•24 views

CVE-2023-49769

Cross-Site Request Forgery CSRF vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.4...

8.8CVSS5.8AI score0.00259EPSS
SaveExploits0References1
NVD
NVD
•added 2023/12/17 10:15 a.m.•41 views

CVE-2023-49769

Cross-Site Request Forgery CSRF vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.4...

8.8CVSS0.00259EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/17 10:15 a.m.•27 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.4...

6.8CVSS7.2AI score0.00259EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/12/17 9:58 a.m.•94 views

CVE-2023-49769

CVE-2023-49769 is a CSRF vulnerability in the WordPress plugin Integrate Google Drive (Integrate Google Drive) affecting versions up to 1.3.4. The issue arises from insufficient CSRF protection (nonce validation not adequately enforced), allowing unauthenticated forgery of actions. Remediation: u...

8.8CVSS8.5AI score0.00259EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/12/17 12:00 a.m.•24 views

PT-2023-31338 · Softlab · Softlab Integrate Google Drive

Name of the Vulnerable Software and Affected Versions: SoftLab Integrate Google Drive versions 1.3.4 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

8.8CVSS8.7AI score0.00259EPSS
SaveExploits0References7
osv_cve
osv_cve
•added 2023/12/07 1:15 p.m.•20 views

CVE-2023-47548

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in SoftLab Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site.This issue affects Integrate Google Drive – Browse, Upload, Download, Embed, Play,...

6.1CVSS6.8AI score0.0039EPSS
SaveExploits0References1
NVD
NVD
•added 2023/12/07 1:15 p.m.•44 views

CVE-2023-47548

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in SoftLab Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site.This issue affects Integrate Google Drive – Browse, Upload, Download, Embed, Play,...

6.1CVSS0.0039EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/07 1:15 p.m.•36 views

Open redirect

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in SoftLab Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site.This issue affects Integrate Google Drive – Browse, Upload, Download, Embed, Play,...

5.8CVSS7.1AI score0.0039EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder