Lucene search
+L

733 matches found

Vulnrichment
Vulnrichment
added 2024/11/19 4:31 p.m.9 views

CVE-2024-51872 WordPress Luzuk Testimonials plugin <= 0.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Luzuk Luzuk Testimonials allows Stored XSS.This issue affects Luzuk Testimonials: from n/a through 0.0.1...

6.5CVSS6.7AI score0.00315EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/19 4:31 p.m.43 views

CVE-2024-51872

CVE-2024-51872 — The connected data confirms a Stored XSS in the WordPress plugin Luzuk Testimonials. Affected: Luzuk Testimonials (WordPress plugin) versions from n/a up through 0.0.1. Root cause: Improper neutralization of input during web page generation, leading to cross-site scripting. Impac...

6.5CVSS7.2AI score0.00315EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/19 4:31 p.m.20 views

CVE-2024-51872 WordPress Luzuk Testimonials plugin <= 0.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in luzuk Themes Luzuk Testimonials luzuk-testimonials allows Stored XSS.This issue affects Luzuk Testimonials: from n/a through = 0.0.1...

6.5CVSS0.00315EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/19 4:30 p.m.18 views

CVE-2024-51936 WordPress ESB Testimonials plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Henry ESB Testimonials allows Stored XSS.This issue affects ESB Testimonials: from n/a through 1.0.0...

6.5CVSS6.7AI score0.00241EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/19 4:30 p.m.31 views

CVE-2024-51936 WordPress ESB Testimonials plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eSparkBiz ESB Testimonials esb-testimonials allows Stored XSS.This issue affects ESB Testimonials: from n/a through = 1.0.0...

6.5CVSS0.00241EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/19 4:30 p.m.63 views

CVE-2024-51936

CVE-2024-51936 is a Stored XSS in the WordPress ESB Testimonials plugin (affected: 1.0.0 and earlier). Root cause: improper neutralization during web page generation. Impact per sources: stored script execution potentially affecting site visitors. Remediation: update to a fixed version (per PT Se...

6.5CVSS7.2AI score0.00241EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/19 12:00 a.m.8 views

WordPress plugin Awesome Fitness Testimonials 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.4AI score0.00377EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/19 12:00 a.m.11 views

PT-2024-35069 · Unknown · Web Testimonials

Name of the Vulnerable Software and Affected Versions: ESB Testimonials versions 1.0.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into the...

6.5CVSS6.7AI score0.00241EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/11/13 2:02 a.m.15 views

CVE-2024-8985 Social Proof (Testimonials) Slider <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via spslider-block Shortcode

The Social Proof Testimonial Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's spslider-block shortcode in all versions up to, and including, 2.2.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possibl...

6.4CVSS5.9AI score0.0043EPSS
SaveExploits0References4
NVD
NVD
added 2024/11/09 2:15 p.m.30 views

CVE-2024-51614

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aajoda Aajoda Testimonials aajoda-testimonials allows Stored XSS.This issue affects Aajoda Testimonials: from n/a through = 2.2.2...

6.5CVSS0.00239EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/09 2:04 p.m.14 views

CVE-2024-51614 WordPress Aajoda Testimonials plugin <= 2.2.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aajoda Aajoda Testimonials aajoda-testimonials allows Stored XSS.This issue affects Aajoda Testimonials: from n/a through = 2.2.2...

6.5CVSS5.9AI score0.00239EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/09 2:04 p.m.56 views

CVE-2024-51614 WordPress Aajoda Testimonials plugin <= 2.2.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aajoda Aajoda Testimonials aajoda-testimonials allows Stored XSS.This issue affects Aajoda Testimonials: from n/a through = 2.2.2...

6.5CVSS0.00239EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/09 2:04 p.m.59 views

CVE-2024-51614

CVE-2024-51614 affects WordPress plugin “Aajoda Testimonials” (

6.5CVSS5.9AI score0.00239EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/09 12:00 a.m.23 views

PT-2024-34757 · Unknown · Aajoda Testimonials

Name of the Vulnerable Software and Affected Versions: Aajoda Testimonials versions n/a through 2.2.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS in Aajoda Testimonials...

6.5CVSS5.8AI score0.00239EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/11/09 12:00 a.m.11 views

WordPress plugin Aajoda Testimonials 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.9AI score0.00239EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/11/08 5:31 p.m.12 views

WordPress ESB Testimonials plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin ESB Testimonials versions = 1.0.0...

6.5CVSS6.1AI score0.00241EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/11/08 2:52 p.m.6 views

WordPress Luzuk Testimonials plugin <= 0.0.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Luzuk Testimonials versions = 0.0.1...

6.5CVSS6.1AI score0.00315EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/11/08 12:29 p.m.8 views

WordPress Awesome Fitness Testimonials plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Awesome Fitness Testimonials versions = 1.0.1...

6.5CVSS6.1AI score0.00377EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/11/08 12:00 a.m.11 views

WordPress Luzuk Testimonials Plugin <= 0.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Luzuk Testimonials Type Plugin Vulnerable versions = 0.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51872 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e42d6eaf9f4a Credits SOPROBRO Required privilege Contribut...

6.5CVSS6.5AI score0.00315EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/11/08 12:00 a.m.14 views

WordPress ESB Testimonials Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software ESB Testimonials Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51936 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5578fdc416f3 Credits SOPROBRO Required privilege Contributor...

6.5CVSS6.9AI score0.00241EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder