Lucene search
+L

1290 matches found

CNNVD
CNNVD
•added 2025/01/16 12:00 a.m.•17 views

WordPress plugin WP Photo Sphere 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.6AI score0.00368EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/16 12:00 a.m.•3 views

CVE-2025-23924: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeremy WP Photo Sphere wp-photo-sphere allows Stored XSS.This issue affects WP Photo Sphere: from n/a through = 3.8...

6.5CVSS5.8AI score0.00368EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/07 4:15 p.m.•13 views

CVE-2025-22532

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in snagysandor Simple Photo Sphere simple-photo-sphere allows Stored XSS.This issue affects Simple Photo Sphere: from n/a through = 0.0.10...

6.5CVSS0.00346EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/07 2:57 p.m.•27 views

CVE-2025-22532 WordPress Simple Photo Sphere plugin <= 0.0.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in snagysandor Simple Photo Sphere simple-photo-sphere allows Stored XSS.This issue affects Simple Photo Sphere: from n/a through = 0.0.10...

6.5CVSS0.00346EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/07 2:57 p.m.•48 views

CVE-2025-22532

CVE-2025-22532 is a stored Cross‑Site Scripting (XSS) vulnerability in the WordPress plugin Simple Photo Sphere. The Initial Description identifies the root cause as improper neutralization of input during web page generation, permitting stored XSS. Connected documents corroborate the CVE entry a...

6.5CVSS7.2AI score0.00346EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/07 2:57 p.m.•5 views

CVE-2025-22532 WordPress Simple Photo Sphere plugin <= 0.0.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in snagysandor Simple Photo Sphere simple-photo-sphere allows Stored XSS.This issue affects Simple Photo Sphere: from n/a through = 0.0.10...

6.5CVSS7.2AI score0.00346EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/07 1:03 p.m.•13 views

WordPress Simple Photo Sphere plugin <= 0.0.10 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Simple Photo Sphere versions = 0.0.10...

6.5CVSS6.1AI score0.00346EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•5 views

CVE-2025-22532: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in snagysandor Simple Photo Sphere simple-photo-sphere allows Stored XSS.This issue affects Simple Photo Sphere: from n/a through = 0.0.10...

6.5CVSS5.8AI score0.00346EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/07 12:00 a.m.•3 views

PT-2025-4523

Name of the Vulnerable Software and Affected Versions Nagy Sandor Simple Photo Sphere versions 0.0.0 through 0.0.10 Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows stored XSS. This means an attacke...

6.5CVSS0.00346EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/01/07 12:00 a.m.•13 views

WordPress plugin Simple Photo Sphere 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.8AI score0.00346EPSS
SaveExploits0References2
OSV
OSV
•added 2024/12/09 2:15 p.m.•13 views

CVE-2024-53814

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Analytify.This issue affects Analytify: from n/a through 5.4.3...

6.5CVSS7.3AI score0.00454EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•3 views

CVE-2024-53814: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Adnan Analytify wp-analytify.This issue affects Analytify: from n/a through = 5.4.3...

6.5CVSS5.8AI score0.00454EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/30 9:02 p.m.•34 views

CVE-2024-53768 WordPress Content Audit Exporter plugin <= 1.1 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ideinteractive Content Audit Exporter content-audit-exporter allows Retrieve Embedded Sensitive Data.This issue affects Content Audit Exporter: from n/a through = 1.1...

5.3CVSS0.00418EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/26 7:22 p.m.•52 views

CVE-2024-10240 Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab

An issue has been discovered in GitLab EE affecting all versions starting from 17.3 before 17.3.7, all versions starting from 17.4 before 17.4.4, all versions starting from 17.5 before 17.5.2 in which an unauthenticated user may be able to read some information about an MR in a private project,...

5.3CVSS0.00558EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/11/26 7:22 p.m.•19 views

CVE-2024-10240 Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab

An issue has been discovered in GitLab EE affecting all versions starting from 17.3 before 17.3.7, all versions starting from 17.4 before 17.4.4, all versions starting from 17.5 before 17.5.2 in which an unauthenticated user may be able to read some information about an MR in a private project,...

5.3CVSS6.5AI score0.00558EPSS
SaveExploits0References2
OSV
OSV
•added 2024/11/04 2:15 p.m.•19 views

CVE-2024-50528

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Stacks Stacks Mobile App Builder allows Retrieve Embedded Sensitive Data.This issue affects Stacks Mobile App Builder: from n/a through 5.2.3...

7.5CVSS5.8AI score0.00446EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/29 9:20 p.m.•47 views

CVE-2024-50425 WordPress WP Booking System – Booking Calendar plugin <= 2.0.19.10 - Broken Access Control vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Roland Murg WP Booking System wp-booking-system.This issue affects WP Booking System: from n/a through = 2.0.19.10...

6.5CVSS0.00429EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/29 12:00 a.m.•3 views

CVE-2024-50425: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Roland Murg WP Booking System wp-booking-system.This issue affects WP Booking System: from n/a through = 2.0.19.10...

6.5CVSS5.8AI score0.00429EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/17 12:15 p.m.•21 views

CVE-2024-48024

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Fahad Mahmood Keep Backup Daily keep-backup-daily allows Retrieve Embedded Sensitive Data.This issue affects Keep Backup Daily: from n/a through = 2.1.3...

7.5CVSS0.00421EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/17 12:07 p.m.•33 views

CVE-2024-48024 WordPress Keep Backup Daily plugin <= 2.1.3 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Fahad Mahmood Keep Backup Daily keep-backup-daily allows Retrieve Embedded Sensitive Data.This issue affects Keep Backup Daily: from n/a through = 2.1.3...

7.5CVSS0.00421EPSS
SaveExploits0References1
Rows per page
Query Builder