Lucene search
K

12 matches found

CVE
CVE
added 2026/05/27 9:49 a.m.9 views

CVE-2026-42754

The CVE-2026-42754 entry describes a Reflected XSS vulnerability in the WordPress plugin favicon-by-realfavicongenerator (Favicon), affecting versions up to and including 1.3.46. The underlying issue is improper neutralization of input during web page generation. Impact is Cross-Site Scripting, w...

7.1CVSS5.8AI score0.00036EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/27 9:49 a.m.4 views

EUVD-2026-32202

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in phbernard Favicon favicon-by-realfavicongenerator allows Reflected XSS.This issue affects Favicon: from n/a through = 1.3.46...

7.1CVSS5.8AI score0.00036EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/27 9:49 a.m.23 views

CVE-2026-42754 WordPress Favicon plugin <= 1.3.46 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in phbernard Favicon favicon-by-realfavicongenerator allows Reflected XSS.This issue affects Favicon: from n/a through = 1.3.46...

7.1CVSS0.00036EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/27 9:49 a.m.5 views

CVE-2026-42754 WordPress Favicon plugin <= 1.3.46 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in phbernard Favicon favicon-by-realfavicongenerator allows Reflected XSS.This issue affects Favicon: from n/a through = 1.3.46...

7.1CVSS5.8AI score0.00036EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.7 views

PT-2026-43662

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in phbernard Favicon favicon-by-realfavicongenerator allows Reflected XSS.This issue affects Favicon: from n/a through = 1.3.46...

7.1CVSS5.8AI score0.00036EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/05/27 12:0 a.m.5 views

WordPress plugin Favicon 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

7.1CVSS5.7AI score0.00036EPSS
Exploits0References1
OSV
OSV
added 2026/03/22 12:0 a.m.1 views

OPENSUSE-SU-2026:10399-1 GraphicsMagick-1.3.46-4.1 on GA media

These are all security issues fixed in the GraphicsMagick-1.3.46-4.1 package on the GA media of openSUSE Tumbleweed...

6.9CVSS5.8AI score0.00017EPSS
Exploits0References1
OPENSUSE Linux
OPENSUSE Linux
added 2026/03/20 12:0 a.m.3 views

GraphicsMagick-1.3.46-3.1 on GA media (moderate)

GraphicsMagick-1.3.46-3.1 on GA media Announcement ID: openSUSE-SU-2026:10391-1 Rating: moderate Cross-References: CVE-2026-30883 CVSS scores: CVE-2026-30883 SUSE : 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H CVE-2026-30883 SUSE : 8.8...

8.8CVSS5.8AI score0.00009EPSS
Exploits0
OSV
OSV
added 2026/03/19 12:0 a.m.0 views

OPENSUSE-SU-2026:10391-1 GraphicsMagick-1.3.46-3.1 on GA media

These are all security issues fixed in the GraphicsMagick-1.3.46-3.1 package on the GA media of openSUSE Tumbleweed...

7.8CVSS5.8AI score0.00009EPSS
Exploits0References1
AlpineLinux
AlpineLinux
added 2025/03/07 6:15 a.m.1 views

CVE-2025-27795

ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits...

4.3CVSS7.3AI score0.00079EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/03/07 12:0 a.m.3 views

GraphicsMagick 安全漏洞

GraphicsMagick is GraphicsMagick open source set of simple image processing tools. It provides resizing, rotation, highlighting and other functions. A security vulnerability exists in GraphicsMagick versions prior to 1.3.46, which stems from an improperly allocated palette buffer in the...

4.5CVSS4.9AI score0.00065EPSS
Exploits0References5
Patchstack
Patchstack
added 2020/12/14 12:0 a.m.17 views

WordPress Directories Pro premium plugin <= 1.3.45 - Authenticated Self-Reflected Cross-Site Scripting (XSS) vulnerability

Authenticated Self-Reflected Cross-Site Scripting XSS vulnerability found by ack Misiura The Missing Link in WordPress Directories Pro premium plugin versions = 1.3.45. Solution Update the WordPress Directories Pro premium plugin to the latest available version at least 1.3.46...

6.1CVSS2.7AI score0.01235EPSS
Exploits3References2Affected Software1
Rows per page
Query Builder