Lucene search
+L

14386 matches found

Patchstack
Patchstack
•added 2023/05/11 12:00 a.m.•25 views

WordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to Cross Site Scripting (XSS)

Software Slimstat Analytics Type Plugin Vulnerable versions = 5.0.4 Fixed in 5.0.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-45366 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7183b75ec323 Credits Rafie Muhammad...

7.1CVSS5.6AI score0.0041EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2023/05/10 11:15 a.m.•13 views

CVE-2022-47600

Unauth. Reflected Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution Mass Email To users plugin = 1.1.4 versions...

6.1CVSS5.8AI score0.00382EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/05/10 10:41 a.m.•15 views

CVE-2022-47600 WordPress Mass Email To users Plugin <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution Mass Email To users plugin = 1.1.4 versions...

7.1CVSS6.3AI score0.00382EPSS
SaveExploits0References1
CVE
CVE
•added 2023/05/10 10:41 a.m.•74 views

CVE-2022-47600

CVE-2022-47600 : Unauthenticated reflected XSS in the WordPress plugin Mass Email To users (I Thirteen Web Solution) version

7.1CVSS6.1AI score0.00382EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2023/05/10 8:15 a.m.•30 views

CVE-2023-24392

Unauth. Reflected Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution Full Width Banner Slider Wp plugin = 1.1.7 versions...

7.1CVSS6.2AI score0.00382EPSS
SaveExploits0References1
OSV
OSV
•added 2023/05/10 8:15 a.m.•12 views

CVE-2023-24392

Unauth. Reflected Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution Full Width Banner Slider Wp plugin = 1.1.7 versions...

6.1CVSS5.8AI score0.00382EPSS
SaveExploits0References1
CVE
CVE
•added 2023/05/10 7:01 a.m.•65 views

CVE-2023-24392

CVE-2023-24392 affects the WordPress plugin I Thirteen Web Solution Full Width Banner Slider WP (versions ≤ 1.1.7). It is a unauthenticated, reflected Cross-Site Scripting (XSS) vulnerability exposed via parameters like search_term and setacrionpage. Patch information in Patchstack indicates the ...

7.1CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/05/10 7:01 a.m.•11 views

CVE-2023-24392 WordPress Full Width Banner Slider Wp Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution Full Width Banner Slider Wp plugin = 1.1.7 versions...

7.1CVSS6.2AI score0.00382EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/10 12:00 a.m.•0 views

CVE-2022-47600: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution Mass Email To users plugin = 1.1.4 versions...

7.1CVSS8.2AI score0.00382EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2023/05/10 12:00 a.m.•29 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-1862)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.1AI score0.01993EPSS
SaveExploits2References2
Patchstack
Patchstack
•added 2023/05/10 12:00 a.m.•18 views

WordPress Download Monitor Plugin <= 4.7.60 is vulnerable to Sensitive Data Exposure

Software Download Monitor Type Plugin Vulnerable versions = 4.7.60 Fixed in 4.7.70 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2022-45354 Patch priority Low CVSS severity Low 5.3 Developer WPChill PSID 4dbbcebe007d Credits Rafie Muhammad Patchstack...

7.5CVSS6.5AI score0.38083EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/10 12:00 a.m.•3 views

CVE-2023-24392: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution Full Width Banner Slider Wp plugin = 1.1.7 versions...

7.1CVSS8.2AI score0.00382EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/05/10 12:00 a.m.•18 views

PT-2023-15424 · I Thirteen Web Solution · Mass Email To Users Plugin

Name of the Vulnerable Software and Affected Versions: I Thirteen Web Solution Mass Email To users plugin versions 1.1.4 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into a website,...

7.1CVSS6.2AI score0.00382EPSS
SaveExploits0References4
Microsoft KB
Microsoft KB
•added 2023/05/09 7:00 a.m.•320 views

May 9, 2023—KB5026370 (OS Build 20348.1726)

None None...

9.8CVSS7.1AI score0.94683EPSS
SaveExploits0
Patchstack
Patchstack
•added 2023/05/09 12:00 a.m.•24 views

WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software CM On Demand Search And Replace Type Plugin Vulnerable versions = 1.3.0 Fixed in 1.3.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-28749 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 611848008c27 Credits Abd...

8.8CVSS6.7AI score0.00262EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2023/05/09 12:00 a.m.•25 views

WordPress StopBadBots Plugin <= 7.31 is vulnerable to Cross Site Scripting (XSS)

Software StopBadBots Type Plugin Vulnerable versions = 7.31 Fixed in 7.32 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32496 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 3406dc788439 Credits Taihei Shimamine Required...

5.9CVSS5.8AI score0.00369EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2023/05/09 12:00 a.m.•20 views

WordPress Brands for WooCommerce Plugin <= 3.7.0.6 is vulnerable to Cross Site Scripting (XSS)

Software Brands for WooCommerce Type Plugin Vulnerable versions = 3.7.0.6 Fixed in 3.8.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23667 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 4a9e535646db Credits István Márton...

6.5CVSS5.8AI score0.00361EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
•added 2023/05/09 12:00 a.m.•25 views

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2023-1802)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.06341EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2023/05/09 12:00 a.m.•18 views

Huawei EulerOS: Security Advisory for glusterfs (EulerOS-SA-2023-1803)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.00914EPSS
SaveExploits1References2
Hacker One
Hacker One
•added 2023/05/08 1:58 p.m.•54 views

Ruby: XSS exploit of RDoc documentation generated by rdoc (CVE-2013-0256)

Vulnerability description not provided...

4.3CVSS5.5AI score0.02992EPSS
SaveExploits0
Rows per page
Query Builder