Lucene search
+L

13 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 7:41 a.m.•19 views

CVE-2024-37536

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Web357 Easy Custom Code LESS/CSS/JS – Live editing allows Stored XSS.This issue affects Easy Custom Code LESS/CSS/JS – Live editing: from n/a through 1.0.8...

5.9CVSS6.9AI score0.00274EPSS
SaveExploits0
NVD
NVD
•added 2024/07/21 7:15 a.m.•33 views

CVE-2024-37536

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Web357 Easy Custom Code LESS/CSS/JS – Live editing allows Stored XSS.This issue affects Easy Custom Code LESS/CSS/JS – Live editing: from n/a through 1.0.8...

5.9CVSS0.00274EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/21 7:05 a.m.•70 views

CVE-2024-37536

CVE-2024-37536 is a stored XSS vulnerability in the WordPress plugin Easy Custom Code (Live editing) affecting 1.0.8 and earlier. Exploitation involves the plugin’s Live editing feature, allowing stored XSS without relying on external vectors; remediation is to update to a version later than 1.0....

5.9CVSS5.9AI score0.00274EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/07/21 7:05 a.m.•43 views

CVE-2024-37536 WordPress Easy Custom Code (LESS/CSS/JS) Plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Web357 Easy Custom Code LESS/CSS/JS – Live editing allows Stored XSS.This issue affects Easy Custom Code LESS/CSS/JS – Live editing: from n/a through 1.0.8...

5.9CVSS0.00274EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/07/21 12:00 a.m.•25 views

PT-2024-27634 · Web357 · Web357 Easy Custom Code

Name of the Vulnerable Software and Affected Versions: Web357 Easy Custom Code LESS/CSS/JS – Live editing versions 1.0.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS...

5.9CVSS6.1AI score0.00274EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/21 12:00 a.m.•8 views

CVE-2024-37536: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Web357 Easy Custom Code LESS/CSS/JS – Live editing allows Stored XSS.This issue affects Easy Custom Code LESS/CSS/JS – Live editing: from n/a through 1.0.8...

5.9CVSS5.8AI score0.00274EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/17 9:15 a.m.•21 views

CVE-2024-32540

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Web357 Fixed HTML Toolbar allows Stored XSS.This issue affects Fixed HTML Toolbar: from n/a through 1.0.7...

5.9CVSS5.7AI score0.00338EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/17 8:30 a.m.•79 views

CVE-2024-32540

CVE-2024-32540 is a stored XSS in the Fixed HTML Toolbar WordPress plugin. The vulnerability arises from improper input neutralization during web page generation, affecting Fixed HTML Toolbar releases up to version 1.0.7 (exact affected range listed as from n/a through 1.0.7). The connected Red H...

5.9CVSS5.2AI score0.00338EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/04/17 12:00 a.m.•12 views

PT-2024-24660 · Web357 · Web357 Fixed Html Toolbar

Name of the Vulnerable Software and Affected Versions: Web357 Fixed HTML Toolbar versions 1.0.7 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject...

5.9CVSS5.7AI score0.00338EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/17 12:00 a.m.•5 views

CVE-2024-32540: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Web357 Fixed HTML Toolbar allows Stored XSS.This issue affects Fixed HTML Toolbar: from n/a through 1.0.7...

5.9CVSS5.8AI score0.00338EPSS
SaveExploits0References2
zdt
zdt
•added 2017/03/05 12:00 a.m.•52 views

Joomla Monthly Archive 3.6.4 Component - author_form Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Monthly Archive v3.6.4 - SQL Injection Google Dork: inurl:index.php?option=commonthlyarchive Date: 04.03.2017 Vendor Homepage: http://web357.eu/ Software Buy:...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2017/03/04 12:00 a.m.•22 views

Joomla! Component Monthly Archive 3.6.4 - author_form SQL Injection

Joomla! Component Monthly Archive 3.6.4 - authorform SQL Injection Exploit Title: Joomla! Component Monthly Archive v3.6.4 - SQL Injection Google Dork: inurl:index.php?option=commonthlyarchive Date: 04.03.2017 Vendor Homepage: http://web357.eu/ Software Buy:...

0.5AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2017/03/04 12:00 a.m.•60 views

Joomla! Component Monthly Archive 3.6.4 - 'author_form' SQL Injection

Exploit Title: Joomla! Component Monthly Archive v3.6.4 - SQL Injection Google Dork: inurl:index.php?option=commonthlyarchive Date: 04.03.2017 Vendor Homepage: http://web357.eu/ Software Buy: https://extensions.joomla.org/extensions/extension/news-display/articles-display/monthly-archive/ Demo:...

5.3AI score
SaveExploits0
Rows per page
Query Builder