Lucene search
+L

82 matches found

EUVD
EUVD
•added 2026/09/03 7:52 p.m.•14 views

EUVD-2026-57321

Material for MkDocs: DOM XSS in search suggestions via query parameter...

5.4CVSS5.8AI score0.00327EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•20 views

PT-2026-81223

The extension allows a request-provided additionalFilters parameter to register a named siteHash filter before the system's own siteHash filter is applied, and the query builder does not overwrite an already-registered named filter. In a shared Solr core serving multiple TYPO3 sites, a visitor ca...

6.3CVSS5.4AI score0.00331EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/08/13 4:21 p.m.•9 views

SUSE CVE-2026-73295

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...

5.4CVSS5.2AI score0.00327EPSS
SaveExploits0References3
NVD
NVD
•added 2026/08/12 5:17 p.m.•14 views

CVE-2026-73295

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...

5.4CVSS0.00327EPSS
SaveExploits0References3
OSV
OSV
•added 2026/08/12 5:17 p.m.•9 views

UBUNTU-CVE-2026-73295

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...

5.4CVSS5.1AI score0.00327EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2026/08/12 5:17 p.m.•17 views

CVE-2026-73295

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...

5.4CVSS5AI score0.00327EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/08/12 4:15 p.m.•41 views

CVE-2026-73295 Material for MkDocs: DOM XSS in search suggestions via query parameter

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...

5.4CVSS0.00327EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/08/12 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-73295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in...

5.4CVSS5.3AI score0.00327EPSS
SaveExploits0References3
FreeBSD
FreeBSD
•added 2026/07/17 12:00 a.m.•14 views

py-mkdocs-material -- DOM XSS vulnerability

Martin Donath reports: Material for MkDocs 7.2.0 through 9.7.6 contains a DOM-based cross-site scripting vulnerability in the optional search.suggest feature. A crafted q URL parameter could execute JavaScript in the documentation site's origin after user interaction...

5.3AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/06 7:54 a.m.•14 views

CVE-2026-28104

Missing Authorization vulnerability in Aryan Shirani Bid Abadi Site Suggest site-suggest allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Site Suggest: from n/a through = 1.3.9...

6.5CVSS5.8AI score0.00332EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/05 6:30 a.m.•15 views

EUVD-2026-9759

Missing Authorization vulnerability in Aryan Shirani Bid Abadi Site Suggest site-suggest allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Site Suggest: from n/a through = 1.3.9...

6.5CVSS5.9AI score0.00332EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/05 6:16 a.m.•33 views

CVE-2026-28104

Missing Authorization vulnerability in Aryan Shirani Bid Abadi Site Suggest site-suggest allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Site Suggest: from n/a through = 1.3.9...

6.5CVSS0.00332EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/05 5:54 a.m.•13 views

CVE-2026-28104 WordPress Site Suggest plugin <= 1.3.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Aryan Shirani Bid Abadi Site Suggest site-suggest allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Site Suggest: from n/a through = 1.3.9...

5.9AI score0.00332EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/05 5:54 a.m.•37 views

CVE-2026-28104

CVE-2026-28104 refers to a Missing Authorization vulnerability in the WordPress plugin Site Suggest (Site Suggest, plugin version

6.5CVSS5.9AI score0.00332EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/05 5:54 a.m.•10 views

CVE-2026-28104

Missing Authorization vulnerability in Aryan Shirani Bid Abadi Site Suggest site-suggest allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Site Suggest: from n/a through = 1.3.9...

5.9AI score0.00332EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/03/05 5:54 a.m.•39 views

CVE-2026-28104 WordPress Site Suggest plugin <= 1.3.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Aryan Shirani Bid Abadi Site Suggest site-suggest allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Site Suggest: from n/a through = 1.3.9...

6.5CVSS0.00332EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/05 12:00 a.m.•17 views

PT-2026-23379

Missing Authorization vulnerability in Aryan Shirani Bid Abadi Site Suggest site-suggest allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Site Suggest: from n/a through = 1.3.9...

5.9AI score0.00332EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/05 12:00 a.m.•3 views

CVE-2026-28104: Missing Authorization

Missing Authorization vulnerability in Aryan Shirani Bid Abadi Site Suggest site-suggest allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Site Suggest: from n/a through = 1.3.9...

6.5CVSS5.8AI score0.00332EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/05 12:00 a.m.•22 views

WordPress plugin Site Suggest 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

6.5CVSS5.8AI score0.00332EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/02/26 12:57 p.m.•18 views

WordPress Site Suggest plugin <= 1.3.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Site Suggest versions = 1.3.9...

6.5CVSS5.9AI score0.00332EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder