Lucene search
K

133 matches found

RedhatCVE
RedhatCVE
added 2026/01/24 3:18 p.m.10 views

CVE-2026-24630

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Design Stylish Cost Calculator stylish-cost-calculator allows Stored XSS.This issue affects Stylish Cost Calculator: from n/a through = 8.2.9...

6.5CVSS5.8AI score0.0013EPSS
Exploits0References1
NVD
NVD
added 2026/01/23 3:16 p.m.6 views

CVE-2026-24630

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Design Stylish Cost Calculator stylish-cost-calculator allows Stored XSS.This issue affects Stylish Cost Calculator: from n/a through = 8.2.9...

6.5CVSS0.0013EPSS
Exploits0References1
CVE
CVE
added 2026/01/23 2:29 p.m.12 views

CVE-2026-24630

CVE-2026-24630 is a Stored XSS in WordPress Stylish Cost Calculator plugin (

6.5CVSS5.8AI score0.0013EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/23 2:29 p.m.3 views

CVE-2026-24630

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Design Stylish Cost Calculator stylish-cost-calculator allows Stored XSS.This issue affects Stylish Cost Calculator: from n/a through = 8.1.8...

6.5CVSS5.9AI score0.0013EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/01/23 2:29 p.m.28 views

CVE-2026-24630 WordPress Stylish Cost Calculator plugin <= 8.2.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Design Stylish Cost Calculator stylish-cost-calculator allows Stored XSS.This issue affects Stylish Cost Calculator: from n/a through = 8.2.9...

6.5CVSS0.0013EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/23 2:29 p.m.3 views

CVE-2026-24630 WordPress Stylish Cost Calculator plugin <= 8.2.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Design Stylish Cost Calculator stylish-cost-calculator allows Stored XSS.This issue affects Stylish Cost Calculator: from n/a through = 8.2.9...

6.5CVSS5.8AI score0.0013EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/01/23 12:0 a.m.4 views

PT-2026-4460

Name of the Vulnerable Software and Affected Versions Stylish Cost Calculator versions through 8.1.8 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, leading to a potential Cross-site Scripting XSS issue. This specific instance allow...

6.5CVSS5.4AI score0.0013EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/01/23 12:0 a.m.5 views

WordPress plugin Stylish Cost Calculator has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.5CVSS5.8AI score0.0013EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/01/09 2:36 p.m.5 views

WordPress Stylish Cost Calculator plugin <= 8.1.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by zaim in WordPress Plugin Stylish Cost Calculator versions = 8.1.9...

6.5CVSS5.9AI score0.0013EPSS
Exploits0Affected Software1
NVD
NVD
added 2026/01/07 12:16 p.m.4 views

CVE-2025-13531

The Stylish Order Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'productname' parameter in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.00243EPSS
Exploits0References5
Patchstack
Patchstack
added 2026/01/07 11:18 a.m.13 views

WordPress Stylish Order Form Builder plugin <= 1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'product_name' Parameter vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting via 'productname' Parameter vulnerability discovered by Sopon Tangpathum SoNaJaa - freelance in WordPress Plugin Stylish Order Form Builder versions = 1.0...

6.4CVSS5.6AI score0.00243EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2026/01/07 8:21 a.m.19 views

CVE-2025-13531

The CVE CVE-2025-13531 affects the Stylish Order Form Builder WordPress plugin. It is a Stored Cross-Site Scripting (XSS) vulnerability through the product_name parameter in all versions up to 1.0, caused by insufficient input sanitization and output escaping. An authenticated attacker with Subsc...

6.4CVSS4.7AI score0.00243EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/01/07 12:0 a.m.3 views

WordPress plugin Stylish Order Form Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.8AI score0.00243EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/12/17 10:2 a.m.3 views

CVE-2025-66122

Missing Authorization vulnerability in Design Stylish Price List stylish-price-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stylish Price List: from n/a through = 7.2.2...

5.3CVSS7AI score0.00342EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/16 9:31 a.m.3 views

EUVD-2025-203587

Missing Authorization vulnerability in Design Stylish Price List stylish-price-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stylish Price List: from n/a through = 7.2.2...

5.4CVSS6.5AI score0.00342EPSS
Exploits0References2
NVD
NVD
added 2025/12/16 9:15 a.m.3 views

CVE-2025-66122

Missing Authorization vulnerability in Design Stylish Price List stylish-price-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stylish Price List: from n/a through = 7.2.2...

5.3CVSS0.00342EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/16 8:12 a.m.2 views

CVE-2025-66122 WordPress Stylish Price List plugin <= 7.2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Design Stylish Price List stylish-price-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stylish Price List: from n/a through = 7.2.2...

5.3CVSS6.6AI score0.00342EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/16 8:12 a.m.29 views

CVE-2025-66122 WordPress Stylish Price List plugin <= 7.2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Design Stylish Price List stylish-price-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stylish Price List: from n/a through = 7.2.2...

5.3CVSS0.00342EPSS
Exploits0References1
CVE
CVE
added 2025/12/16 8:12 a.m.5 views

CVE-2025-66122

CVE-2025-66122 affects WordPress plugin Stylish Price List (versions up to 7.2.2). The issue is Missing Authorization / Broken Access Control, enabling exploitation of improperly configured access controls. Connected sources corroborate: Red Hat and EUVD entries mirror the same description, and P...

5.3CVSS6.6AI score0.00342EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.3 views

PT-2025-51411

Name of the Vulnerable Software and Affected Versions Design Stylish Price List versions through 7.2.2 Description An issue exists in Design Stylish Price List related to incorrectly configured access control security levels, allowing for missing authorization. The issue allows exploitation of...

5.4CVSS6.5AI score0.00342EPSS
Exploits0References3
Rows per page
Query Builder