Lucene search
+L

1184 matches found

CNNVD
CNNVD
•added 2024/12/13 12:00 a.m.•16 views

WordPress plugin ImmoToolBox Connect has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.9AI score0.00354EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/12 3:23 a.m.•64 views

CVE-2024-12338

CVE-2024-12338 affects Website Toolbox Community plugin for WordPress. The vulnerability is a Reflected Cross-Site Scripting via the websitetoolbox_username parameter in all versions up to 2.0.1, caused by insufficient input sanitization and output escaping. Impact: attackers can inject web scrip...

6.1CVSS6.4AI score0.00408EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/12/12 3:23 a.m.•42 views

CVE-2024-12338 Website Toolbox Community <= 2.0.1 - Reflected Cross-Site Scripting via websitetoolbox_username

The Website Toolbox Community plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘websitetoolboxusername’ parameter in all versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacker...

6.1CVSS0.00408EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2024/12/12 12:35 a.m.•21 views

WordPress Website Toolbox Community plugin <= 2.0.1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Website Toolbox Community versions = 2.0.1...

6.1CVSS6.3AI score0.00408EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/12 12:00 a.m.•7 views

CVE-2024-12338: Improper Neutralization of Input During Web Page Generation

The Website Toolbox Community plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘websitetoolboxusername’ parameter in all versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacker...

6.1CVSS6AI score0.00408EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/12 12:00 a.m.•21 views

WordPress Plugin Website Toolbox Community Cross-Site Script Vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

6.1CVSS7.6AI score0.00408EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/12/12 12:00 a.m.•41 views

PT-2024-17550 · WordPress · Website Toolbox Community

Name of the Vulnerable Software and Affected Versions: Website Toolbox Community plugin for WordPress versions up to, and including, 2.0.1 Description: The issue is related to Reflected Cross-Site Scripting, which occurs due to insufficient input sanitization and output escaping. This allows...

6.1CVSS7.7AI score0.00408EPSS
SaveExploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/12/10 12:31 a.m.•10 views

Malicious code in binance-toolbox-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a585655865db20c2d6f9419d9c516d93d59ac420d066bda570716d917933605 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2024/12/10 12:31 a.m.•7 views

MAL-2024-12138 Malicious code in binance-toolbox-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a585655865db20c2d6f9419d9c516d93d59ac420d066bda570716d917933605 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7.2AI score
SaveExploits0References1
NVD
NVD
•added 2024/11/19 5:15 p.m.•25 views

CVE-2024-50547

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mark Hodder Themedy Toolbox themedy-toolbox allows DOM-Based XSS.This issue affects Themedy Toolbox: from n/a through = 1.0.16...

6.5CVSS0.00306EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/19 4:32 p.m.•11 views

CVE-2024-50547 WordPress Themedy Toolbox plugin <= 1.0.16 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mark Hodder Themedy Toolbox themedy-toolbox allows DOM-Based XSS.This issue affects Themedy Toolbox: from n/a through = 1.0.16...

6.5CVSS5.9AI score0.00306EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/19 4:32 p.m.•45 views

CVE-2024-50547 WordPress Themedy Toolbox plugin <= 1.0.16 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mark Hodder Themedy Toolbox themedy-toolbox allows DOM-Based XSS.This issue affects Themedy Toolbox: from n/a through = 1.0.16...

6.5CVSS0.00306EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/19 4:32 p.m.•60 views

CVE-2024-50547

CVE-2024-50547 is a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Themedy Toolbox (versions up to and including 1.0.16). The issue arises from improper neutralization of input during web page generation, described as a DOM-based XSS in some sources and as an input handling weak...

6.5CVSS5.9AI score0.00306EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/19 12:00 a.m.•7 views

PT-2024-34325

Name of the Vulnerable Software and Affected Versions: Themedy Toolbox versions 1.0.0 through 1.0.16 Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This can lead to cross-site scripting attacks. Recommendations: Fo...

6.5CVSS0.00306EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/11/19 12:00 a.m.•12 views

WordPress Plugin Themedy Toolbox Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6AI score0.00306EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•6 views

CVE-2024-50547: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mark Hodder Themedy Toolbox themedy-toolbox allows DOM-Based XSS.This issue affects Themedy Toolbox: from n/a through = 1.0.16...

6.5CVSS5.8AI score0.00306EPSS
SaveExploits0References1
osv_rhsa
osv_rhsa
•added 2024/11/15 8:28 p.m.•38 views

RHSA-2024:9135 Red Hat Security Advisory: toolbox security update

Bulletin has no description...

7.5CVSS7.7AI score0.01414EPSS
SaveExploits0References33
osv_alsa
osv_alsa
•added 2024/11/12 12:00 a.m.•22 views

ALSA-2024:9135 Moderate: toolbox security update

Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman and other standard container technologies from OCI. Security Fixes: golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in...

7.5CVSS7.9AI score0.01414EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2024/11/12 12:00 a.m.•14 views

RHEL 9 : toolbox (RHSA-2024:9135)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9135 advisory. Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman...

7.5CVSS7.6AI score0.01414EPSS
SaveExploits0References12
AlmaLinux
AlmaLinux
•added 2024/11/12 12:00 a.m.•46 views

Moderate: toolbox security update

Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman and other standard container technologies from OCI. Security Fixes: golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in...

7.5CVSS8.6AI score0.01414EPSS
SaveExploits0References10
Rows per page
Query Builder