Lucene search
+L

5710 matches found

NVD
NVD
•added 2022/12/14 10:15 p.m.•30 views

CVE-2022-4410

The Permalink Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including 2.2.20.3 due to improper output escaping on post/page/media titles. This makes it possible for attackers to inject arbitrary web scripts on the permalink-manager page if...

6.4CVSS0.00576EPSS
SaveExploits0References4
Prion
Prion
•added 2022/12/14 10:15 p.m.•26 views

Cross site scripting

The Permalink Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including 2.2.20.3 due to improper output escaping on post/page/media titles. This makes it possible for attackers to inject arbitrary web scripts on the permalink-manager page if...

4.9CVSS5AI score0.00576EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2022/12/14 9:20 p.m.•18 views

CVE-2022-4410 Permalink Manager Lite <= 2.2.20.3 - Authenticated Stored Cross-Site Scripting

The Permalink Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including 2.2.20.3 due to improper output escaping on post/page/media titles. This makes it possible for attackers to inject arbitrary web scripts on the permalink-manager page if...

6.4CVSS6.2AI score0.00576EPSS
SaveExploits0References3
NVD
NVD
•added 2022/12/14 3:15 p.m.•43 views

CVE-2022-31358

A reflected cross-site scripting XSS vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers to execute arbitrary web scripts or HTML via non-existent endpoints under path /api2/html/...

9CVSS0.01286EPSS
SaveExploits1References4
Prion
Prion
•added 2022/12/14 3:15 p.m.•27 views

Cross site scripting

A reflected cross-site scripting XSS vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers to execute arbitrary web scripts or HTML via non-existent endpoints under path /api2/html/...

6CVSS7.7AI score0.01286EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/14 12:00 a.m.•3 views

CVE-2022-31358: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers to execute arbitrary web scripts or HTML via non-existent endpoints under path /api2/html/...

9CVSS6.2AI score0.01286EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2022/12/14 12:00 a.m.•45 views

CVE-2022-31358

A reflected cross-site scripting XSS vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers to execute arbitrary web scripts or HTML via non-existent endpoints under path /api2/html/...

8.1AI score0.01286EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2022/12/14 12:00 a.m.•14 views

CVE-2022-31358

A reflected cross-site scripting XSS vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers to execute arbitrary web scripts or HTML via non-existent endpoints under path /api2/html/...

6.1AI score0.01286EPSS
SaveExploits1References3
Prion
Prion
•added 2022/12/13 9:15 p.m.•23 views

Cross site scripting

The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several values that can be added to an Image Hover in versions 9.8.1 to 9.8.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to...

4.9CVSS5AI score0.0055EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2022/12/13 8:18 p.m.•43 views

CVE-2022-4207

The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several values that can be added to an Image Hover in versions 9.8.1 to 9.8.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to...

5.5CVSS5.2AI score0.0055EPSS
SaveExploits0References3
OSV
OSV
•added 2022/12/13 8:18 p.m.•22 views

CVE-2022-4207

The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several values that can be added to an Image Hover in versions 9.8.1 to 9.8.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to...

5.5CVSS5.6AI score
SaveExploits0References5
NVD
NVD
•added 2022/12/13 6:15 p.m.•33 views

CVE-2022-45028

A cross-site scripting XSS vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to /cgi-bin/logs.ha...

6.1CVSS0.00541EPSS
SaveExploits1References2
OSV
OSV
•added 2022/12/13 2:15 p.m.•23 views

CVE-2022-46058

AeroCMS v0.0.1 was discovered to contain a cross-site scripting XSS vulnerability via addpost.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field...

4.8CVSS6.1AI score0.00462EPSS
SaveExploits1References1
Prion
Prion
•added 2022/12/13 2:15 p.m.•26 views

Cross site scripting

AeroCMS v0.0.1 was discovered to contain a cross-site scripting XSS vulnerability via addpost.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field...

4.3CVSS5AI score0.00462EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2022/12/13 12:00 a.m.•104 views

CVE-2022-46058

CVE-2022-46058 affects AeroCMS v0.0.1, with a cross-site scripting (XSS) vulnerability exploitable via add_post.php. The issue allows an attacker to inject a crafted payload into the Comments text field to execute arbitrary web scripts or HTML. This is documented across multiple sources (NVD, RH ...

4.8CVSS5AI score0.00462EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/13 12:00 a.m.•3 views

CVE-2022-46058: Improper Neutralization of Input During Web Page Generation

AeroCMS v0.0.1 was discovered to contain a cross-site scripting XSS vulnerability via addpost.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field...

4.8CVSS6.1AI score0.00462EPSS
SaveExploits1References3
Prion
Prion
•added 2022/12/07 2:15 p.m.•27 views

Cross site scripting

A cross-site scripting XSS vulnerability in Book Store Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Level parameter under the Add New System User module...

4.9CVSS5.3AI score0.00554EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2022/12/07 2:15 a.m.•22 views

Cross site scripting

Online Leave Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability in the component /leavesystem/admin/?page=maintenance/department. This vulnerability allows attackers to execute arbitrary web scripts or HTML via crafted payload injected into the Name...

4.3CVSS5AI score0.00452EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2022/12/07 12:00 a.m.•10 views

CVE-2022-45008

Online Leave Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability in the component /leavesystem/admin/?page=maintenance/department. This vulnerability allows attackers to execute arbitrary web scripts or HTML via crafted payload injected into the Name...

5AI score0.00452EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2022/12/07 12:00 a.m.•46 views

CVE-2022-45217

A cross-site scripting XSS vulnerability in Book Store Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Level parameter under the Add New System User module...

5.5AI score0.00554EPSS
SaveExploits1References2
Rows per page
Query Builder