Lucene search
K

12 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 6:17 a.m.3 views

CVE-2024-50469

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brightvesseldev Textboxes textboxes allows DOM-Based XSS.This issue affects Textboxes: from n/a through = 0.1.3.1...

6.5CVSS5.9AI score0.00156EPSS
Exploits0References1
NVD
NVD
added 2024/10/28 6:15 p.m.12 views

CVE-2024-50469

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brightvesseldev Textboxes textboxes allows DOM-Based XSS.This issue affects Textboxes: from n/a through = 0.1.3.1...

6.5CVSS0.00156EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/10/28 5:41 p.m.16 views

CVE-2024-50469 WordPress Textboxes plugin <= 0.1.3.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brightvesseldev Textboxes textboxes allows DOM-Based XSS.This issue affects Textboxes: from n/a through = 0.1.3.1...

6.5CVSS0.00156EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/28 5:41 p.m.9 views

CVE-2024-50469 WordPress Textboxes plugin <= 0.1.3.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brightvesseldev Textboxes textboxes allows DOM-Based XSS.This issue affects Textboxes: from n/a through = 0.1.3.1...

6.5CVSS5.9AI score0.00156EPSS
Exploits0References1
CVE
CVE
added 2024/10/28 5:41 p.m.41 views

CVE-2024-50469

CVE-2024-50469 is a DOM-based XSS vulnerability in the WordPress Textboxes plugin (versions up to 0.1.3.1). The issue is described as Improper Neutralization of Input During Web Page Generation (XSS) affecting Textboxes; CVSS 3.1 base score 6.5 (Network, Low Privileges, User Interaction required,...

6.5CVSS5.9AI score0.00156EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/10/28 12:0 a.m.1 views

WordPress plugin Textboxes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

6.5CVSS6AI score0.00156EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/10/24 12:47 p.m.1 views

WordPress Textboxes plugin <= 0.1.3.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Textboxes versions = 0.1.3.1...

6.5CVSS6.1AI score0.00156EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/10/24 12:0 a.m.6 views

WordPress Textboxes Plugin <= 0.1.3.1 is vulnerable to Cross Site Scripting (XSS)

Software Textboxes Type Plugin Vulnerable versions = 0.1.3.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50469 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 50ef1a0649e6 Credits SOPROBRO Required privilege Contributor...

6.5CVSS6.5AI score0.00156EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2020/08/13 9:34 a.m.4 views

SUSE-SU-2020:2235-1 Security update for libreoffice

This update for libreoffice fixes the following issues: - Update to 6.4.5.2: Various fixes all around - Remove mime-info and application-registry dirs bsc1062631 - Fix bsc1172053 - LO-L3: Image disappears during roundtrip 365-Impress-365 bsc1172053.diff - Fix bsc1172189 - LO-L3: Impress crashes...

6.5CVSS6.1AI score0.00459EPSS
Exploits0References11
OSV
OSV
added 2020/08/12 1:16 p.m.5 views

SUSE-SU-2020:2217-1 Security update for libreoffice

This update for libreoffice fixes the following issues: - Update to 6.4.5.2: Various fixes all around - Remove mime-info and application-registry dirs bsc1062631 - Fix bsc1172053 - LO-L3: Image disappears during roundtrip 365-Impress-365 bsc1172053.diff - Fix bsc1172189 - LO-L3: Impress crashes...

6.5CVSS6.1AI score0.00459EPSS
Exploits0References11
NVD
NVD
added 2019/05/08 4:29 p.m.6 views

CVE-2019-11643

Persistent XSS has been found in the OneShield Policy Dragon Core framework before 5.1.10. Remote adversaries can inject malicious JavaScript into textboxes decorated with type string, which is subsequently stored to the applicable data store. This can be exploited remotely by both authenticated...

6.1CVSS6.1AI score0.0088EPSS
Exploits0References2
Prion
Prion
added 2019/05/08 4:29 p.m.9 views

Design/Logic Flaw

Persistent XSS has been found in the OneShield Policy Dragon Core framework before 5.1.10. Remote adversaries can inject malicious JavaScript into textboxes decorated with type string, which is subsequently stored to the applicable data store. This can be exploited remotely by both authenticated...

4.3CVSS6AI score0.0088EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder