Lucene search
+L

2 matches found

CNVD
CNVD
added 2025/08/15 12:0 a.m.3 views

WordPress Mosaic Generator plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. The WordPress Mosaic Generator plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-suppli...

6.4CVSS6.1AI score0.00208EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/08/11 10:1 p.m.6 views

WordPress Mosaic Generator plugin <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'c' Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'c' Parameter vulnerability discovered by muhammad yudha in WordPress Plugin Mosaic Generator versions = 1.0.5...

6.4CVSS5.5AI score0.00208EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder