Lucene search
+L

245 matches found

Positive Technologies
Positive Technologies
added 2024/02/14 12:00 a.m.11 views

PT-2024-13766 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. There is a mention of a rejected reason stating that the item is unused, alon...

6.3AI score
SaveExploits0References2
OSV
OSV
added 2024/02/10 9:15 a.m.12 views

CVE-2024-23514

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ClickToTweet.Com Click To Tweet allows Stored XSS.This issue affects Click To Tweet: from n/a through 2.0.14...

5.4CVSS5.8AI score0.00346EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/02/10 8:16 a.m.41 views

CVE-2024-23514 WordPress Click To Tweet Plugin <= 2.0.14 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ClickToTweet.Com Click To Tweet allows Stored XSS.This issue affects Click To Tweet: from n/a through 2.0.14...

6.5CVSS6.6AI score0.00346EPSS
SaveExploits0References1
CVE
CVE
added 2024/02/10 8:16 a.m.73 views

CVE-2024-23514

CVE-2024-23514 is a Stored XSS vulnerability in the WordPress Click To Tweet plugin (versions up to 2.0.14). The issue arises from improper input neutralization during web page generation, allowing authenticated users (Contributor+) to inject scripts that may execute when others view affected pag...

6.5CVSS6.7AI score0.00346EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/10 8:16 a.m.15 views

CVE-2024-23514 WordPress Click To Tweet Plugin <= 2.0.14 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ClickToTweet.Com Click To Tweet allows Stored XSS.This issue affects Click To Tweet: from n/a through 2.0.14...

6.5CVSS6.7AI score0.00346EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/02/10 12:00 a.m.13 views

WordPress Plugin Click To Tweet Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

6.5CVSS8.4AI score0.00346EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
added 2024/02/04 12:00 a.m.9 views

Click To Tweet <= 2.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The Click To Tweet plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.0.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to...

4.9CVSS5.7AI score0.00346EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/01/30 12:00 a.m.13 views

WordPress Click To Tweet Plugin <= 2.0.14 is vulnerable to Cross Site Scripting (XSS)

Software Click To Tweet Type Plugin Vulnerable versions = 2.0.14 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-23514 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID dfb01ad116d2 Credits Ngô Thiên An ancorn from VNPT-VCI Requir...

6.5CVSS6.5AI score0.00346EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/10/25 6:17 p.m.11 views

CVE-2023-45767

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Wokamoto Simple Tweet plugin = 1.4.0.2 versions...

4.8CVSS7.3AI score0.00409EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/25 6:17 p.m.29 views

CVE-2023-45767

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Wokamoto Simple Tweet plugin = 1.4.0.2 versions...

5.9CVSS5.4AI score0.00409EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/25 6:17 p.m.22 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Wokamoto Simple Tweet plugin = 1.4.0.2 versions...

4.3CVSS4.8AI score0.00409EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/10/25 12:00 a.m.7 views

WordPress Plugin Simple Tweet Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

5.9CVSS6AI score0.00409EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/10/25 12:00 a.m.12 views

The vulnerability of the Twittee Text Tweet Plugin of the WordPress content management system allows a hacker to carry out cross-site scripting attacks.

The vulnerability of the Twittee Text Tweet Plugin for WordPress content management system exists due to the lack of protective measures for website structures. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.1CVSS6.8AI score0.00886EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/24 12:00 p.m.16 views

CVE-2023-45767 WordPress Simple Tweet Plugin <= 1.4.0.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Wokamoto Simple Tweet plugin = 1.4.0.2 versions...

5.9CVSS5.6AI score0.00409EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/10/24 12:00 p.m.37 views

CVE-2023-45767 WordPress Simple Tweet Plugin <= 1.4.0.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Wokamoto Simple Tweet plugin = 1.4.0.2 versions...

5.9CVSS5.5AI score0.00409EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/24 12:00 p.m.54 views

CVE-2023-45767

CVE-2023-45767 represents a Stored XSS vulnerability in the WordPress plugin Simple Tweet, versioned

5.9CVSS5.1AI score0.00409EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/10/12 12:00 a.m.27 views

WordPress Simple Tweet Plugin <= 1.4.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Simple Tweet Type Plugin Vulnerable versions = 1.4.0.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-45767 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 3b30792fe2d1 Credits Rio Darmawan Required...

5.9CVSS5.7AI score0.00409EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/02 8:42 a.m.39 views

CVE-2023-41856 WordPress Click To Tweet Plugin <= 2.0.14 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in ClickToTweet.Com Click To Tweet plugin = 2.0.14 versions...

7.1CVSS6.3AI score0.00379EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/10/02 8:42 a.m.18 views

CVE-2023-41856 WordPress Click To Tweet Plugin <= 2.0.14 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in ClickToTweet.Com Click To Tweet plugin = 2.0.14 versions...

7.1CVSS5.8AI score0.00379EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/10/02 12:00 a.m.19 views

PT-2023-28122 · WordPress · Click To Tweet

Name of the Vulnerable Software and Affected Versions: Click To Tweet plugin versions = 2.0.14 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to...

7.1CVSS6.2AI score0.00379EPSS
SaveExploits0References3
Rows per page
Query Builder