Lucene search
+L

5 matches found

NVD
NVD
•added 2019/11/13 9:15 p.m.•32 views

CVE-2019-17550

The Blog2Social plugin before 5.9.0 for WordPress is affected by: Cross Site Scripting XSS. The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the b2sid parameter. The component is: views/b2s/post.calendar.php. The attack vector is: When the Administrator is logge...

6.1CVSS6.2AI score0.01336EPSS
SaveExploits0References4
Mend
Mend
•added 2019/11/13 8:23 p.m.•4 views

CVE-2019-17550

The Blog2Social plugin before 5.9.0 for WordPress is affected by: Cross Site Scripting XSS. The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the b2sid parameter. The component is: views/b2s/post.calendar.php. The attack vector is: When the Administrator is logge...

6.1CVSS0.01336EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2019/11/13 8:23 p.m.•39 views

CVE-2019-17550

The Blog2Social plugin before 5.9.0 for WordPress is affected by: Cross Site Scripting XSS. The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the b2sid parameter. The component is: views/b2s/post.calendar.php. The attack vector is: When the Administrator is logge...

6.2AI score0.01336EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2019/11/13 12:00 a.m.•3 views

PT-2019-15200

Name of the Vulnerable Software and Affected Versions Blog2Social plugin versions prior to 5.9.0 Description The issue allows an attacker to execute arbitrary HTML and JavaScript code via the b2s id parameter. This occurs in the views/b2s/post.calendar.php component when the Administrator is logg...

6.1CVSS0.01336EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/13 12:00 a.m.•6 views

CVE-2019-17550: Improper Neutralization of Input During Web Page Generation

The Blog2Social plugin before 5.9.0 for WordPress is affected by: Cross Site Scripting XSS. The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the b2sid parameter. The component is: views/b2s/post.calendar.php. The attack vector is: When the Administrator is logge...

6.1CVSS6.7AI score0.01336EPSS
SaveExploits0References2
Rows per page
Query Builder