Lucene search
K

66 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:17 a.m.2 views

CVE-2025-23860

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in crea8xion Charity-thermometer charitydonation-thermometer allows Stored XSS.This issue affects Charity-thermometer: from n/a through = 1.1.2...

6.5CVSS7.2AI score0.00335EPSS
Exploits0References1
CNVD
CNVD
added 2025/12/12 12:0 a.m.1 views

WordPress Donation Thermometer plugin cross-site scripting vulnerability

The WordPress Donation Thermometer plugin is a plugin for WordPress sites that visualizes the progress of donations by displaying a progress bar usually like a thermometer. The WordPress Donation Thermometer plugin suffers from a cross-site scripting vulnerability that stems from the application'...

6.5CVSS6.1AI score0.00029EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/10 2:22 p.m.1 views

CVE-2025-67550

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rhewlif Donation Thermometer donation-thermometer allows Stored XSS.This issue affects Donation Thermometer: from n/a through = 2.2.6...

6.5CVSS6AI score0.00029EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/10 12:0 a.m.1 views

Meatmeet Pro BBQ Thermometer 安全漏洞

Meatmeet Pro BBQ Thermometer is an advanced smart thermometer from Meatmeet. A security vulnerability exists in Meatmeet Pro BBQ Thermometer version v1.0.34.4, which stems from the lack of Secure Boot functionality and could lead to malicious code execution...

6.8CVSS7.3AI score0.00035EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/10 12:0 a.m.3 views

Meatmeet Pro BBQ Thermometer 安全漏洞

Meatmeet Pro BBQ Thermometer is an advanced smart thermometer from Meatmeet. A security vulnerability exists in the Meatmeet Pro BBQ Thermometer that stems from an undisabled JTAG debugging interface, which could lead to malicious firmware flashing and unauthorized network access...

6.8CVSS6.7AI score0.00031EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/10 12:0 a.m.0 views

Meatmeet Pro BBQ Thermometer 安全漏洞

Meatmeet Pro BBQ Thermometer is an advanced smart thermometer from Meatmeet. A security vulnerability exists in Meatmeet Pro BBQ Thermometer version v1.0.34.4, which originates from an unauthenticated OTA upgrade mechanism and could lead to remote code execution...

8.8CVSS8AI score0.00323EPSS
Exploits1References3
CNNVD
CNNVD
added 2025/12/10 12:0 a.m.2 views

Meatmeet Pro BBQ Thermometer 安全漏洞

Meatmeet Pro BBQ Thermometer is an advanced smart thermometer from Meatmeet. A security vulnerability exists in the Meatmeet Pro BBQ Thermometer version v1.0.34.4, which stems from the inclusion of hard-coded Wi-Fi credentials in the firmware, which could lead to unauthorized network access...

9.8CVSS6.7AI score0.00071EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/10 12:0 a.m.1 views

Meatmeet Pro BBQ Thermometer 安全漏洞

Meatmeet Pro BBQ Thermometer is an advanced smart thermometer from Meatmeet. A security vulnerability exists in the Meatmeet Pro BBQ Thermometer version v1.0.34.4, which stems from unencrypted firmware and could lead to the disclosure of sensitive information and unauthorized network access...

4.6CVSS6.3AI score0.00014EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/10 12:0 a.m.2 views

Meatmeet Pro BBQ Thermometer 安全漏洞

Meatmeet Pro BBQ Thermometer is an advanced smart thermometer from Meatmeet. A security vulnerability exists in Meatmeet Pro BBQ Thermometer version v1.0.34.4, which originates from unauthenticated BLE commands and could lead to a denial of service attack...

6.5CVSS6.8AI score0.00152EPSS
Exploits1References3
EUVD
EUVD
added 2025/12/09 6:30 p.m.1 views

EUVD-2025-202096

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rhewlif Donation Thermometer donation-thermometer allows Stored XSS.This issue affects Donation Thermometer: from n/a through = 2.2.6...

5.5AI score0.00029EPSS
Exploits0References2
NVD
NVD
added 2025/12/09 4:18 p.m.1 views

CVE-2025-67550

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rhewlif Donation Thermometer donation-thermometer allows Stored XSS.This issue affects Donation Thermometer: from n/a through = 2.2.6...

6.5CVSS0.00029EPSS
Exploits0References1
CVE
CVE
added 2025/12/09 2:14 p.m.5 views

CVE-2025-67550

CVE-2025-67550 is a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Donation Thermometer (donation-thermometer). The issue allows stored XSS due to improper input neutralization during web page generation, affecting the plugin versions

6.5CVSS5.6AI score0.00029EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/09 2:14 p.m.14 views

CVE-2025-67550 WordPress Donation Thermometer plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rhewlif Donation Thermometer donation-thermometer allows Stored XSS.This issue affects Donation Thermometer: from n/a through = 2.2.6...

6.5CVSS0.00029EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/09 2:14 p.m.1 views

CVE-2025-67550 WordPress Donation Thermometer plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rhewlif Donation Thermometer donation-thermometer allows Stored XSS.This issue affects Donation Thermometer: from n/a through = 2.2.6...

6.5CVSS5.6AI score0.00029EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.2 views

PT-2025-49924

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rhewlif Donation Thermometer donation-thermometer allows Stored XSS.This issue affects Donation Thermometer: from n/a through = 2.2.6...

6.5CVSS6AI score0.00029EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/09 12:0 a.m.1 views

WordPress plugin Donation Thermometer 跨站脚本漏洞

The WordPress Donation Thermometer plugin is a plugin for WordPress sites that visualizes the progress of donations by displaying a progress bar usually like a thermometer. The WordPress Donation Thermometer plugin suffers from a cross-site scripting vulnerability that stems from the application'...

6.5CVSS6AI score0.00029EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/11/26 1:38 a.m.3 views

WordPress Donation Thermometer plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Donation Thermometer versions = 2.2.6...

6.5CVSS6.1AI score0.00029EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-3481

Malicious code in bioql PyPI...

6.5CVSS8.7AI score0.00335EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-42555

Malicious code in bioql PyPI...

4.8CVSS5AI score0.0049EPSS
Exploits2References1
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2022-3128

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Donation Thermometer WordPress plugin before 2.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin t...

4.8CVSS5.9AI score0.0049EPSS
Exploits2References2
Rows per page
Query Builder