Lucene search
+L

4 matches found

NVD
NVD
•added 2021/09/10 2:15 p.m.•31 views

CVE-2021-38355

The Bug Library WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the successimportcount parameter found in the /bug-library.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.3...

6.1CVSS0.00938EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/09/10 1:34 p.m.•51 views

CVE-2021-38355 Bug Library <= 2.0.3 Reflected Cross-Site Scripting

The Bug Library WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the successimportcount parameter found in the /bug-library.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.3...

6.1CVSS6.2AI score0.00938EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/09/10 12:00 a.m.•19 views

WordPress plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress Plugin is an open source application plugin for WordPress. WordPress Bug Library plugin 2.0.3 and previous...

6.1CVSS6.1AI score0.00938EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2021/08/02 11:15 a.m.•12 views

CVE-2021-24496

The Community Events WordPress plugin before 1.4.8 does not sanitise, validate or escape its importrowscount and successimportcount GET parameters before outputting them back in an admin page, leading to a reflected Cross-Site Scripting issue which will be executed in the context of a logged in...

6.1CVSS6.3AI score0.00827EPSS
SaveExploits2References2
Rows per page
Query Builder