Lucene search
K

7 matches found

OSV
OSV
added 2021/09/10 2:15 p.m.1 views

CVE-2021-38355

The Bug Library WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the successimportcount parameter found in the /bug-library.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.3...

6.1CVSS5.8AI score0.0021EPSS
Exploits1References2
NVD
NVD
added 2021/09/10 2:15 p.m.6 views

CVE-2021-38355

The Bug Library WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the successimportcount parameter found in the /bug-library.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.3...

6.1CVSS0.0021EPSS
Exploits1References2
Cvelist
Cvelist
added 2021/09/10 1:34 p.m.14 views

CVE-2021-38355 Bug Library <= 2.0.3 Reflected Cross-Site Scripting

The Bug Library WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the successimportcount parameter found in the /bug-library.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.3...

6.1CVSS6.2AI score0.0021EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/09/10 12:0 a.m.2 views

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress Plugin is an open source application plugin for WordPress. WordPress Bug Library plugin 2.0.3 and previous...

6.1CVSS6.1AI score0.0021EPSS
Exploits1References4
WPVulnDB
WPVulnDB
added 2021/09/09 12:0 a.m.18 views

Bug Library < 2.0.4 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the via the successimportcount parameter found in the /bug-library.php file which allows attackers to inject arbitrary web scripts...

6.1CVSS4.4AI score0.0021EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2021/08/02 11:15 a.m.0 views

CVE-2021-24496

The Community Events WordPress plugin before 1.4.8 does not sanitise, validate or escape its importrowscount and successimportcount GET parameters before outputting them back in an admin page, leading to a reflected Cross-Site Scripting issue which will be executed in the context of a logged in...

6.1CVSS6.3AI score0.0019EPSS
Exploits2References1
CNNVD
CNNVD
added 2021/08/02 12:0 a.m.2 views

WordPress 插件跨站脚本漏洞

WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.The Community Events plugin is an application plugin for WordPress. A cross-site scripting vulnerability exists in...

6.1CVSS5.3AI score0.0019EPSS
Exploits2References1
Rows per page
Query Builder