Lucene search
+L

733 matches found

Patchstack
Patchstack
added 2024/11/08 12:00 a.m.13 views

WordPress Awesome Fitness Testimonials Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Awesome Fitness Testimonials Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51806 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6dc5acf46761 Credits SOPROBRO Required privilege...

6.5CVSS6.5AI score0.00377EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/11/01 3:15 p.m.14 views

CVE-2024-47362

Missing Authorization vulnerability in WPChill Strong Testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.1.16...

8.8CVSS6.8AI score0.00398EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/01 3:15 p.m.36 views

CVE-2024-47362

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials.This issue affects Strong Testimonials: from n/a through = 3.1.16...

8.8CVSS0.00398EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/01 2:17 p.m.63 views

CVE-2024-47362

CVE-2024-47362 is a Broken Access Control vulnerability in WordPress plugin Strong Testimonials (versions

8.8CVSS5.9AI score0.00398EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/01 2:17 p.m.14 views

CVE-2024-47362 WordPress Strong Testimonials plugin <= 3.1.16 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPChill Strong Testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.1.16...

4.3CVSS4.7AI score0.00398EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/01 2:17 p.m.33 views

CVE-2024-47362 WordPress Strong Testimonials plugin <= 3.1.16 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials.This issue affects Strong Testimonials: from n/a through = 3.1.16...

4.3CVSS0.00398EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/01 12:00 a.m.12 views

PT-2024-32579 · Wpchill · Wpchill Strong Testimonials

Name of the Vulnerable Software and Affected Versions: WPChill Strong Testimonials versions 3.1.16 and earlier Description: A Missing Authorization vulnerability in WPChill Strong Testimonials allows exploiting incorrectly configured access control security levels. Recommendations: For versions...

8.8CVSS7.2AI score0.00398EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/11/01 12:00 a.m.10 views

WordPress plugin Strong Testimonials 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exis...

8.8CVSS6.3AI score0.00398EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/10/31 2:54 p.m.8 views

WordPress Aajoda Testimonials plugin <= 2.2.2 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Aajoda Testimonials versions = 2.2.2...

6.5CVSS5.8AI score0.00239EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/10/31 12:00 a.m.15 views

WordPress Aajoda Testimonials Plugin <= 2.2.2 is vulnerable to Cross Site Scripting (XSS)

Software Aajoda Testimonials Type Plugin Vulnerable versions = 2.2.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51614 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 68d3e8f6dba1 Credits SOPROBRO Required privilege...

6.5CVSS6.5AI score0.00239EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/10/17 7:15 p.m.17 views

CVE-2024-49295

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PressTigers Simple Testimonials Showcase simple-testimonials-showcase allows Stored XSS.This issue affects Simple Testimonials Showcase: from n/a through = 1.1.6...

5.9CVSS0.00259EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/17 7:06 p.m.62 views

CVE-2024-49295

CVE-2024-49295 (WordPress: Simple Testimonials Showcase) The vulnerability is an XSS in the Simple Testimonials Showcase plugin for WordPress, affecting version

5.9CVSS5.9AI score0.00259EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/17 7:06 p.m.33 views

CVE-2024-49295 WordPress Simple Testimonials Showcase plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PressTigers Simple Testimonials Showcase simple-testimonials-showcase allows Stored XSS.This issue affects Simple Testimonials Showcase: from n/a through = 1.1.6...

5.9CVSS0.00259EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/17 7:06 p.m.15 views

CVE-2024-49295 WordPress Simple Testimonials Showcase plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PressTigers Simple Testimonials Showcase.This issue affects Simple Testimonials Showcase: from n/a through 1.1.6...

5.9CVSS7AI score0.00259EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/10/15 11:51 a.m.15 views

WordPress Simple Testimonials Showcase plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Simple Testimonials Showcase versions = 1.1.6...

5.9CVSS6.1AI score0.00259EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/10/15 12:00 a.m.17 views

WordPress Simple Testimonials Showcase Plugin <= 1.1.6 is vulnerable to Cross Site Scripting (XSS)

Software Simple Testimonials Showcase Type Plugin Vulnerable versions = 1.1.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49295 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 2ec0877579b7 Credits SOPROBRO Required privilege...

5.9CVSS6.9AI score0.00259EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/01 7:30 a.m.8 views

CVE-2024-8989 Stars Testimonials <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via stars_testimonials Shortcode

The Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's starstestimonials shortcode in all versions up to, and including, 3.3.1 due to insufficient input sanitization and...

6.4CVSS5.8AI score0.00342EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2024/10/01 3:16 a.m.8 views

WordPress Stars Testimonials plugin <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via stars_testimonials Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via starstestimonials Shortcode vulnerability discovered by Peter Thaleikis in WordPress Plugin Stars Testimonials versions = 3.3.1...

6.4CVSS5.8AI score0.00342EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/10/01 12:00 a.m.16 views

PT-2024-39354 · WordPress · Stars Testimonials

Name of the Vulnerable Software and Affected Versions: Stars Testimonials plugin for WordPress versions up to, and including, 3.3.1 Description: The issue is related to Stored Cross-Site Scripting in the Stars Testimonials plugin for WordPress. This is due to insufficient input sanitization and...

6.4CVSS6.3AI score0.00342EPSS
SaveExploits0References9
Patchstack
Patchstack
added 2024/10/01 12:00 a.m.17 views

WordPress Stars Testimonials Plugin <= 3.3.1 is vulnerable to Cross Site Scripting (XSS)

Software Stars Testimonials Type Plugin Vulnerable versions = 3.3.1 Fixed in 3.3.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8989 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b53073d7e5ac Credits Peter Thaleikis...

6.4CVSS5.8AI score0.00342EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder