Lucene search
+L

1024 matches found

Vulnrichment
Vulnrichment
added 2025/03/03 1:30 p.m.8 views

CVE-2025-25084 WordPress UniTimetable plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in antrouss UniTimetable unitimetable allows Stored XSS.This issue affects UniTimetable: from n/a through = 1.1...

6.5CVSS5.2AI score0.00354EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/03 1:30 p.m.22 views

CVE-2025-23576 WordPress WP Intro.JS Plugin plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cfuze WP Intro.JS wp-intro-js-tours allows Reflected XSS.This issue affects WP Intro.JS: from n/a through = 1.1...

7.1CVSS0.00357EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/03 1:30 p.m.20 views

CVE-2025-23517 WordPress Google Map on Post/Page plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sunil chaulagain Google Map on Post/Page google-map-on-postpage allows Reflected XSS.This issue affects Google Map on Post/Page: from n/a through = 1.1...

7.1CVSS0.00271EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/03 12:00 a.m.6 views

WordPress plugin Google Map on Post/Page 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS5.9AI score0.00271EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/03/03 12:00 a.m.7 views

WordPress plugin DX Sales CRM 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6AI score0.00357EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/03/03 12:00 a.m.8 views

shishuocms 安全漏洞

shishuocms Shishuocms CMS is a learning content management system by the individual developer gaofeng4623. A security vulnerability exists in shishuocms version 1.1, which stems from the presence of cross-site scripting...

4.8CVSS4AI score0.00391EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/03/02 12:00 a.m.11 views

IBM Cognos Analytics Mobile 安全漏洞

IBM Cognos Analytics Mobile is an application from International Business Machines IBM, Inc. integrates reporting, modeling, analytics, dashboards, cases, and event management. A security vulnerability exists in IBM Cognos Analytics Mobile version 1.1, which stems from weak obfuscation and could...

5.3CVSS6.8AI score0.00257EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/03/02 12:00 a.m.7 views

IBM Cognos Analytics Mobile 安全漏洞

IBM Cognos Analytics Mobile is an application from International Business Machines IBM, Inc. integrates reporting, modeling, analytics, dashboards, cases, and event management. A security vulnerability exists in IBM Cognos Analytics Mobile version 1.1, which originates from debug code log message...

2.4CVSS6.6AI score0.00193EPSS
SaveExploits0References3
CVE
CVE
added 2025/02/26 6:00 a.m.70 views

CVE-2024-13628

CVE-2024-13628 concerns the WP Pricing Table WordPress plugin, affected up to version 1.1. The issue is a reflected cross-site scripting (XSS) caused by outputting an unsanitized/unescaped parameter back into the page, which could be exploited against high-privilege users (e.g., admins) by crafti...

6.1CVSS6.4AI score0.0064EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2025/02/26 12:00 a.m.10 views

WordPress plugin WP Pricing Table 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.1CVSS8.8AI score0.0064EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/02/26 12:00 a.m.12 views

PT-2025-8675

Name of the Vulnerable Software and Affected Versions WP Pricing Table WordPress plugin version 1.1 Description The issue is related to a Reflected Cross-Site Scripting problem. This occurs because a parameter is not properly sanitised and escaped before being outputted back in the page. This cou...

6.1CVSS8.1AI score0.0064EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/02/26 12:00 a.m.7 views

WordPress plugin Post Sync 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.1CVSS8.9AI score0.00609EPSS
SaveExploits1References2
Patchstack
Patchstack
added 2025/02/24 3:13 p.m.9 views

WordPress Reactive Mortgage Calculator plugin <= 1.1 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin Reactive Mortgage Calculator versions = 1.1...

6.5CVSS5.8AI score0.00216EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/02/24 3:11 p.m.8 views

WordPress VG PostCarousel plugin <= 1.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by muhammad yudha in WordPress Plugin VG PostCarousel versions = 1.1...

7.5CVSS7AI score0.00778EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/02/24 12:00 a.m.16 views

PT-2025-7722

Name of the Vulnerable Software and Affected Versions VG PostCarousel versions 1.1 and earlier Description The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File...

7.5CVSS8.4AI score0.00778EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/02/24 12:00 a.m.8 views

WordPress plugin Reactive Mortgage Calculator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.6AI score0.00216EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/02/20 12:00 a.m.10 views

PT-2025-7301 · Phpjabbers · Phpjabbers Bus Reservation System

Name of the Vulnerable Software and Affected Versions: PHPJabbers Bus Reservation System version 1.1 Description: The issue concerns Multiple Stored Cross-Site Scripting XSS in the title and name parameters. This allows for malicious scripts to be stored and executed when a user accesses the...

5.4CVSS5.2AI score0.00343EPSS
SaveExploits2References4
Vulnrichment
Vulnrichment
added 2025/02/20 12:00 a.m.9 views

CVE-2023-51318

PHPJabbers Bus Reservation System v1.1 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...

5.2AI score0.00343EPSS
SaveExploits2References2
NVD
NVD
added 2025/02/14 1:15 p.m.9 views

CVE-2025-23525

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kvvaradha Kv Compose Email From Dashboard kv-send-email-from-admin allows Reflected XSS.This issue affects Kv Compose Email From Dashboard: from n/a through = 1.1...

7.1CVSS0.00302EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/02/14 12:00 a.m.15 views

PT-2025-7126 · Unknown · Beauty Parlour Management System

Name of the Vulnerable Software and Affected Versions: Source Code and Project Beauty Parlour Management System version V1.1 Description: A SQL Injection issue was found in the /bpms/index.php endpoint, allowing remote attackers to execute arbitrary code via the name POST request parameter...

5.9CVSS8.7AI score0.00343EPSS
SaveExploits1References4
Rows per page
Query Builder