Lucene search
+L

579 matches found

CNNVD
CNNVD
•added 2025/03/03 12:00 a.m.•11 views

WordPress plugin Catch Duplicate Switcher 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

7.1CVSS5.9AI score0.00385EPSS
SaveExploits0References2
NVD
NVD
•added 2025/03/01 5:15 a.m.•18 views

CVE-2024-9217

The Currency Switcher for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.16.2. This makes it possible for unauthenticated attackers to inject arbitrary w...

6.1CVSS0.00349EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/03/01 4:21 a.m.•13 views

CVE-2024-9217 Currency Switcher for WooCommerce <= 2.16.2 - Reflected Cross-Site Scripting

The Currency Switcher for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.16.2. This makes it possible for unauthenticated attackers to inject arbitrary w...

6.1CVSS6.1AI score0.00349EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/03/01 4:21 a.m.•31 views

CVE-2024-9217 Currency Switcher for WooCommerce <= 2.16.2 - Reflected Cross-Site Scripting

The Currency Switcher for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.16.2. This makes it possible for unauthenticated attackers to inject arbitrary w...

6.1CVSS0.00349EPSS
SaveExploits0References3
CVE
CVE
•added 2025/03/01 4:21 a.m.•71 views

CVE-2024-9217

CVE-2024-9217 (Currency Switcher for WooCommerce, WordPress) is a reflected cross-site scripting vulnerability in versions

6.1CVSS6.4AI score0.00349EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/03/01 12:00 a.m.•12 views

WordPress plugin Currency Switcher for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS7.6AI score0.00349EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2025/02/28 10:51 p.m.•16 views

WordPress Currency Switcher for WooCommerce plugin <= 2.16.2 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Colin Xu in WordPress Plugin Currency Switcher for WooCommerce versions = 2.16.2...

6.1CVSS6.3AI score0.00349EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/02/05 9:16 a.m.•9 views

CVE-2024-56029

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dreamwinner Easy Language Switcher easy-language-switcher allows Reflected XSS.This issue affects Easy Language Switcher: from n/a through = 1.0...

7.1CVSS7.2AI score0.00259EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 7:04 a.m.•16 views

CVE-2024-32695

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marco Gasi Language Switcher for Transposh allows Reflected XSS.This issue affects Language Switcher for Transposh: from n/a through 1.5.9...

7.1CVSS5.2AI score0.00354EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 5:10 a.m.•14 views

CVE-2024-10640

The The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.4.2.2. This is due to the software allowing users to execute an action that does not properly validate a value before running...

7.3CVSS7.6AI score0.0046EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/04 10:32 p.m.•19 views

CVE-2024-8271

The The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.4.2.1. This is due to the software allowing users to execute an action that does not properly validate a value before running...

7.3CVSS7.6AI score0.00737EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/02/03 4:41 p.m.•9 views

Malicious code in @electra-web/bitrate-switcher (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
•added 2025/02/03 4:41 p.m.•7 views

MAL-2025-764 Malicious code in @electra-web/bitrate-switcher (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
NVD
NVD
•added 2025/01/16 9:15 p.m.•31 views

CVE-2025-23940

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in horiyuki Image Switcher image-switcher allows Stored XSS.This issue affects Image Switcher: from n/a through = 0.1.1...

6.5CVSS0.00227EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/16 9:15 p.m.•29 views

CVE-2025-23939

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in KHAN-IT Image Switcher image-switcher allows Stored XSS.This issue affects Image Switcher: from n/a through = 1.1...

6.5CVSS0.00227EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/16 8:08 p.m.•13 views

CVE-2025-23939 WordPress Image Switcher plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in KHAN-IT Image Switcher image-switcher allows Stored XSS.This issue affects Image Switcher: from n/a through = 1.1...

6.5CVSS7.2AI score0.00227EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/16 8:08 p.m.•78 views

CVE-2025-23939

CVE-2025-23939: A stored cross-site scripting vulnerability in the Image Switcher component (WordPress Image Switcher plugin) is reported as: root cause is improper neutralization of input during web page generation. The Red Hat CVE entry describes the issue as an XSS vulnerability affecting Imag...

6.5CVSS7.2AI score0.00227EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/16 8:08 p.m.•35 views

CVE-2025-23939 WordPress Image Switcher plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in KHAN-IT Image Switcher image-switcher allows Stored XSS.This issue affects Image Switcher: from n/a through = 1.1...

6.5CVSS0.00227EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/16 8:08 p.m.•76 views

CVE-2025-23940

CVE-2025-23940 concerns the WordPress plugin Image Switcher . The vulnerability is a stored cross-site scripting (XSS) issue described as an improper input neutralization during web page generation. Public details in the connected Red Hat and Wordfence entries confirm affected software as Image S...

6.5CVSS7.2AI score0.00227EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/16 8:08 p.m.•11 views

CVE-2025-23940 WordPress jupdf pdf viewer plugin <= 0.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in horiyuki Image Switcher image-switcher allows Stored XSS.This issue affects Image Switcher: from n/a through = 0.1.1...

6.5CVSS7.2AI score0.00227EPSS
SaveExploits0References1
Rows per page
Query Builder