Lucene search
+L

45 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•27 views

EUVD-2023-12394

Malicious code in bioql PyPI...

5.4CVSS5.7AI score0.0049EPSS
SaveExploits2References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2025-5902

Malicious code in bioql PyPI...

6.4CVSS8.7AI score0.00263EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2025-2710

Malicious code in bioql PyPI...

6.5CVSS8.7AI score0.00294EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 11:34 a.m.•15 views

CVE-2025-22310

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in marsian TemplatesNext ToolKit templatesnext-toolkit allows Stored XSS.This issue affects TemplatesNext ToolKit: from n/a through = 3.2.9...

6.5CVSS7.2AI score0.00294EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:45 a.m.•19 views

CVE-2023-22712

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in TemplatesNext TemplatesNext ToolKit plugin = 3.2.7 versions...

6.5CVSS5.6AI score0.00383EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/01 4:21 a.m.•8 views

CVE-2024-13559 TemplatesNext ToolKit <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The TemplatesNext ToolKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'txwoowishlisttable' shortcode in all versions up to, and including, 3.2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible fo...

6.4CVSS5.8AI score0.00263EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/03/01 4:21 a.m.•24 views

CVE-2024-13559 TemplatesNext ToolKit <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The TemplatesNext ToolKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'txwoowishlisttable' shortcode in all versions up to, and including, 3.2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible fo...

6.4CVSS0.00263EPSS
SaveExploits0References2
CVE
CVE
•added 2025/03/01 4:21 a.m.•61 views

CVE-2024-13559

CVE-2024-13559 concerns the TemplatesNext ToolKit WordPress plugin. The vulnerability is a Stored Cross-Site Scripting (Stored XSS) in the plugin’s shortcodes, specifically tx_woo_wishlist_table, and affects all versions up to and including 3.2.9. The root cause is insufficient input sanitization...

6.4CVSS5.8AI score0.00263EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/01 12:00 a.m.•1 views

CVE-2024-13559: Improper Neutralization of Input During Web Page Generation

The TemplatesNext ToolKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'txwoowishlisttable' shortcode in all versions up to, and including, 3.2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible fo...

6.4CVSS6AI score0.00263EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/01 12:00 a.m.•15 views

WordPress plugin TemplatesNext ToolKit 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...

6.4CVSS7.6AI score0.00263EPSS
SaveExploits0References4
NVD
NVD
•added 2025/01/07 11:15 a.m.•18 views

CVE-2025-22310

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in marsian TemplatesNext ToolKit templatesnext-toolkit allows Stored XSS.This issue affects TemplatesNext ToolKit: from n/a through = 3.2.9...

6.5CVSS0.00294EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/07 10:48 a.m.•89 views

CVE-2025-22310

CVE-2025-22310 : Stored XSS in TemplatesNext ToolKit (TemplatesNext ToolKit

6.5CVSS7.2AI score0.00294EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/07 10:48 a.m.•12 views

CVE-2025-22310 WordPress TemplatesNext ToolKit plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in marsian TemplatesNext ToolKit templatesnext-toolkit allows Stored XSS.This issue affects TemplatesNext ToolKit: from n/a through = 3.2.9...

6.5CVSS8.6AI score0.00294EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/07 10:48 a.m.•40 views

CVE-2025-22310 WordPress TemplatesNext ToolKit plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in marsian TemplatesNext ToolKit templatesnext-toolkit allows Stored XSS.This issue affects TemplatesNext ToolKit: from n/a through = 3.2.9...

6.5CVSS0.00294EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/07 12:00 a.m.•18 views

PT-2025-4425 · Unknown · Templatesnext Toolkit

Name of the Vulnerable Software and Affected Versions: TemplatesNext ToolKit versions 3.2.9 and earlier Description: The issue affects TemplatesNext ToolKit, allowing Stored XSS due to improper neutralization of input during web page generation. This enables an attacker to inject malicious script...

6.5CVSS6.1AI score0.00294EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•3 views

CVE-2025-22310: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in marsian TemplatesNext ToolKit templatesnext-toolkit allows Stored XSS.This issue affects TemplatesNext ToolKit: from n/a through = 3.2.9...

6.5CVSS5.8AI score0.00294EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/07 12:00 a.m.•18 views

WordPress plugin TemplatesNext ToolKit 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...

6.5CVSS7.6AI score0.00294EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/06 12:21 p.m.•15 views

WordPress TemplatesNext ToolKit plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin TemplatesNext ToolKit versions = 3.2.9...

6.5CVSS6.1AI score0.00294EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2023/03/23 2:15 p.m.•33 views

CVE-2023-22712

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in TemplatesNext TemplatesNext ToolKit plugin = 3.2.7 versions...

6.5CVSS5.8AI score0.00383EPSS
SaveExploits0References1
OSV
OSV
•added 2023/03/23 2:15 p.m.•11 views

CVE-2023-22712

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in TemplatesNext TemplatesNext ToolKit plugin = 3.2.7 versions...

5.4CVSS6.1AI score0.00383EPSS
SaveExploits0References1
Rows per page
Query Builder