Lucene search
+L

27 matches found

Cvelist
Cvelist
added 2023/09/01 10:44 a.m.27 views

CVE-2023-24412 WordPress Image Social Feed Plugin Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Web-Settler Image Social Feed plugin = 1.7.6 versions...

5.9CVSS5.5AI score0.00369EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/09/01 10:44 a.m.11 views

CVE-2023-24412 WordPress Image Social Feed Plugin Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Web-Settler Image Social Feed plugin = 1.7.6 versions...

5.9CVSS5.6AI score0.00369EPSS
SaveExploits0References1
CVE
CVE
added 2023/09/01 10:44 a.m.48 views

CVE-2023-24412

CVE-2023-24412 describes a stored XSS vulnerability in the Web-Settler Image Social Feed WordPress plugin up to version 1.7.6, requiring admin+ authentication to exploit. The issue is associated with the Image Social Feed/“add-instagram” plugin and is documented across multiple sources (NVD/Red H...

5.9CVSS5AI score0.00369EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/09/01 12:0 a.m.8 views

PT-2023-19573 · Unknown · Web-Settler Image Social Feed

Name of the Vulnerable Software and Affected Versions: Web-Settler Image Social Feed plugin versions 1.7.6 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions 1.7.6 and...

5.9CVSS5.3AI score0.00369EPSS
SaveExploits0References4
OSV
OSV
added 2022/04/04 8:15 p.m.5 views

CVE-2021-36851

Authenticated editor or higher user role Cross-Site Scripting XSS vulnerability in Web-Settler Testimonial Slider – Free Testimonials Slider Plugin WordPress plugin via parameters mpsppostsbgcolor, mpsppostsdescriptioncolor, mpspslidenavbuttoncolor...

5.4CVSS6.1AI score0.00557EPSS
SaveExploits0References2
CVE
CVE
added 2022/04/04 7:46 p.m.81 views

CVE-2021-36851

The CVE-2021-36851 entry affects the WordPress plugin “Testimonial Slider” (Free Testimonials Slider Plugin) and is due to insufficient sanitization of color-related parameters (mpsp_posts_bg_color, mpsp_posts_description_color, mpsp_slide_nav_button_color). This authenticated-XSS vulnerability r...

5.4CVSS4.7AI score0.00557EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/04/04 7:46 p.m.21 views

CVE-2021-36851 WordPress Testimonial Slider plugin <= 3.5.8.3 - Cross-Site Scripting (XSS) vulnerability

Authenticated editor or higher user role Cross-Site Scripting XSS vulnerability in Web-Settler Testimonial Slider – Free Testimonials Slider Plugin WordPress plugin via parameters mpsppostsbgcolor, mpsppostsdescriptioncolor, mpspslidenavbuttoncolor...

4.1CVSS5.5AI score0.00557EPSS
SaveExploits0References2
Rows per page
Query Builder