Lucene search
+L

3140 matches found

NVD
NVD
added 2024/03/31 8:15 p.m.25 views

CVE-2024-31101

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in August Infotech AI Twitter Feeds Twitter widget & shortcode allows Stored XSS.This issue affects AI Twitter Feeds Twitter widget & shortcode: from n/a through 2.4...

6.5CVSS6.4AI score0.0032EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/31 8:15 p.m.15 views

CVE-2024-30553

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joby Joseph WP Twitter Mega Fan Box Widget allows Stored XSS.This issue affects WP Twitter Mega Fan Box Widget : from n/a through 1.0...

5.9CVSS5.7AI score0.00339EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/31 7:52 p.m.64 views

CVE-2024-30553

CVE-2024-30553 is a stored XSS in the WP Twitter Mega Fan Box Widget for WordPress. The vulnerability arises from improper input neutralization during web page generation, affecting the WP Twitter Mega Fan Box Widget versions up to 1.0 (older than 1.0). The connected Red Hat advisory confirms the...

5.9CVSS8.6AI score0.00339EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/31 7:14 p.m.23 views

CVE-2024-31101 WordPress AI Twitter Feeds (Twitter widget & shortcode) plugin <= 2.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in August Infotech AI Twitter Feeds Twitter widget & shortcode allows Stored XSS.This issue affects AI Twitter Feeds Twitter widget & shortcode: from n/a through 2.4...

6.5CVSS6.7AI score0.0032EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/31 7:14 p.m.71 views

CVE-2024-31101

CVE-2024-31101 is an stored XSS in the AI Twitter Feeds WordPress plugin (Twitter widget & shortcode) affecting versions up to 2.4. The issue is described as improper neutralization during web page generation. Public data from Patchstack/NVD indicates CVSSv3.1 base score 6.5 (MEDIUM), with attack...

6.5CVSS8.6AI score0.0032EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/31 7:14 p.m.31 views

CVE-2024-31101 WordPress AI Twitter Feeds (Twitter widget & shortcode) plugin <= 2.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in August Infotech AI Twitter Feeds Twitter widget & shortcode allows Stored XSS.This issue affects AI Twitter Feeds Twitter widget & shortcode: from n/a through 2.4...

6.5CVSS6.6AI score0.0032EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/31 12:0 a.m.12 views

WordPress Plugin AI Twitter Feeds 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin AI Twitter Feeds A...

6.5CVSS7.6AI score0.0032EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/03/31 12:0 a.m.7 views

PT-2024-23483 · WordPress · Wp Twitter Mega Fan Box Widget

Name of the Vulnerable Software and Affected Versions: WP Twitter Mega Fan Box Widget versions 1.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows for Stored XSS, enabling attackers to...

5.9CVSS9.4AI score0.00339EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/03/31 12:0 a.m.9 views

WordPress Plugin WP Twitter Mega Fan Box Widget 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin WP Twitter Mega Fan Box...

5.9CVSS7.5AI score0.00339EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/03/31 12:0 a.m.9 views

PT-2024-23770 · August Infotech · August Infotech Ai Twitter Feeds

Name of the Vulnerable Software and Affected Versions: August Infotech AI Twitter Feeds Twitter widget & shortcode versions n/a through 2.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored...

6.5CVSS8.9AI score0.0032EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/03/29 11:57 a.m.6 views

WordPress AI Twitter Feeds (Twitter widget & shortcode) plugin <= 2.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by NGÔ THIÊN AN Patchstack Alliance in WordPress Plugin AI Twitter Feeds Twitter widget & shortcode versions = 2.4...

6.5CVSS7.1AI score0.0032EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/03/29 10:49 a.m.6 views

WordPress WP Twitter Mega Fan Box Widget plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Cronus Patchstack Alliance in WordPress Plugin WP Twitter Mega Fan Box Widget versions = 1.0...

5.9CVSS7.1AI score0.00339EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/03/29 12:0 a.m.13 views

WordPress AI Twitter Feeds (Twitter widget & shortcode) Plugin <= 2.4 is vulnerable to Cross Site Scripting (XSS)

Software AI Twitter Feeds Twitter widget & shortcode Type Plugin Vulnerable versions = 2.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31101 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3416dc3b50bc Credits Ngô Thiên An...

6.5CVSS6.6AI score0.0032EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/03/29 12:0 a.m.13 views

WordPress WP Twitter Mega Fan Box Widget Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software WP Twitter Mega Fan Box Widget Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30553 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 6b9f98b57959 Credits Cronus Required privilege...

5.9CVSS6.6AI score0.00339EPSS
SaveExploits0References1Affected Software1
Openbugbounty
Openbugbounty
added 2024/03/26 5:37 p.m.13 views

rolexgrade.me Cross Site Scripting vulnerability OBB-3887128

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/03/25 9:4 a.m.11 views

nyeburlesqueball.bpt.me Cross Site Scripting vulnerability OBB-3884999

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/03/22 7:27 p.m.10 views

tabeloop.me Cross Site Scripting vulnerability OBB-3884358

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/03/20 12:34 p.m.7 views

unpopsstl.bpt.me Cross Site Scripting vulnerability OBB-3881079

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/03/18 4:38 p.m.11 views

fcyt.umss.edu.bo Cross Site Scripting vulnerability OBB-3876837

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/03/18 9:19 a.m.13 views

patchettwi.bpt.me Cross Site Scripting vulnerability OBB-3876748

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Rows per page
Query Builder