Lucene search
+L

4 matches found

attackerkb
attackerkb
•added 2022/08/01 1:15 p.m.•12 views

CVE-2022-1324

The Event Timeline WordPress plugin through 1.1.5 does not sanitize and escape Timeline Text, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

4.8CVSS5.5AI score0.0061EPSS
SaveExploits2References2
OSV
OSV
•added 2022/08/01 1:15 p.m.•15 views

CVE-2022-1324

The Event Timeline WordPress plugin through 1.1.5 does not sanitize and escape Timeline Text, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

4.8CVSS5.8AI score0.0061EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/01 12:00 a.m.•2 views

CVE-2022-1324: Improper Neutralization of Input During Web Page Generation

The Event Timeline WordPress plugin through 1.1.5 does not sanitize and escape Timeline Text, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

4.8CVSS5.7AI score0.0061EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2022/08/01 12:00 a.m.•14 views

WordPress plugin Event Timeline 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

4.8CVSS5AI score0.0061EPSS
SaveExploits2References2
Rows per page
Query Builder