Lucene search
K

19 matches found

RedhatCVE
RedhatCVE
added 2025/12/31 5:6 p.m.2 views

CVE-2025-66094

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dmccan Yada Wiki yada-wiki allows Stored XSS.This issue affects Yada Wiki: from n/a through = 3.5...

6.5CVSS5.9AI score0.0013EPSS
Exploits0References1
NVD
NVD
added 2025/12/30 5:15 p.m.5 views

CVE-2025-66094

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dmccan Yada Wiki yada-wiki allows Stored XSS.This issue affects Yada Wiki: from n/a through = 3.5...

6.5CVSS0.0013EPSS
Exploits0References1
CVE
CVE
added 2025/12/30 4:17 p.m.10 views

CVE-2025-66094

CVE-2025-66094 is a stored XSS in Yada Wiki (WordPress plugin) that is exploitable by an authenticated user (Contributor+). The Wordfence report lists the vulnerability as authenticated (Contributor+) Stored Cross-Site Scripting in Yada Wiki

6.5CVSS5.9AI score0.0013EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/30 4:17 p.m.20 views

CVE-2025-66094 WordPress Yada Wiki plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dmccan Yada Wiki yada-wiki allows Stored XSS.This issue affects Yada Wiki: from n/a through = 3.5...

6.5CVSS0.0013EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/30 4:17 p.m.3 views

CVE-2025-66094 WordPress Yada Wiki plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yada Wiki yada-wiki allows Stored XSS.This issue affects Yada Wiki: from n/a through 3.5...

6.5CVSS5.6AI score0.0013EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/30 4:17 p.m.2 views

EUVD-2025-205812

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yada Wiki yada-wiki allows Stored XSS.This issue affects Yada Wiki: from n/a through 3.5...

6.5CVSS5.5AI score0.0013EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/12/30 4:15 p.m.7 views

WordPress Yada Wiki plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Yada Wiki versions = 3.5...

6.5CVSS5.9AI score0.0013EPSS
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/30 12:0 a.m.3 views

PT-2025-54196

CVE-2025-66094 Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yada Wiki yada-wiki allows Stored XSS.This issue affects Yada Wi… https://t.co/T4HkGF9Afd...

6.5CVSS6AI score0.0013EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.2 views

WordPress plugin Yada Wiki 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.7AI score0.0013EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2021-11382

Malware in sbrugna...

5.4CVSS5.6AI score0.00547EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/22 6:24 p.m.7 views

CVE-2021-24470

The Yada Wiki WordPress plugin before 3.4.1 did not sanitise, validate or escape the anchor attribute of its shortcode, leading to a Stored Cross-Site Scripting issue...

5.4CVSS6AI score0.00547EPSS
Exploits1References1
OSV
OSV
added 2021/08/02 11:15 a.m.2 views

CVE-2021-24470

The Yada Wiki WordPress plugin before 3.4.1 did not sanitise, validate or escape the anchor attribute of its shortcode, leading to a Stored Cross-Site Scripting issue...

5.4CVSS5.8AI score0.00547EPSS
Exploits1References1
NVD
NVD
added 2021/08/02 11:15 a.m.20 views

CVE-2021-24470

The Yada Wiki WordPress plugin before 3.4.1 did not sanitise, validate or escape the anchor attribute of its shortcode, leading to a Stored Cross-Site Scripting issue...

5.4CVSS0.00547EPSS
Exploits1References1
Prion
Prion
added 2021/08/02 11:15 a.m.15 views

Cross site scripting

The Yada Wiki WordPress plugin before 3.4.1 did not sanitise, validate or escape the anchor attribute of its shortcode, leading to a Stored Cross-Site Scripting issue...

3.5CVSS5.3AI score0.00547EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/08/02 10:32 a.m.19 views

CVE-2021-24470 Yada Wiki < 3.4.1 - Contributor+ Stored XSS

The Yada Wiki WordPress plugin before 3.4.1 did not sanitise, validate or escape the anchor attribute of its shortcode, leading to a Stored Cross-Site Scripting issue...

5.5AI score0.00547EPSS
Exploits1References1
CVE
CVE
added 2021/08/02 10:32 a.m.58 views

CVE-2021-24470

The CVE-2021-24470 affects the Yada Wiki WordPress plugin (versions before 3.4.1). Root cause: the shortcode anchor attribute was not sanitised/validated/escaped, causing a Stored XSS. Evidence in connected docs includes PoC payloads demonstrating exploitation and confirmation that the issue is f...

5.4CVSS5.3AI score0.00547EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2021/08/02 12:0 a.m.4 views

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists i...

5.4CVSS5.4AI score0.00547EPSS
Exploits1References1
WPVulnDB
WPVulnDB
added 2021/06/28 12:0 a.m.24 views

Yada Wiki < 3.4.1 - Contributor+ Stored XSS

The plugin did not sanitise, validate or escape the anchor attribute of its shortcode, leading to a Stored Cross-Site Scripting issue PoC - Create a wiki page. If there is already a page, you can skip. The page can be a draft. - Add this shortcode to a post/page, view it and move the mouse over...

3.5CVSS0.6AI score0.00547EPSS
Exploits1Affected Software1
wpexploit
wpexploit
added 2021/06/28 12:0 a.m.110 views

Yada Wiki < 3.4.1 - Contributor+ Stored XSS

The plugin did not sanitise, validate or escape the anchor attribute of its shortcode, leading to a Stored Cross-Site Scripting issue - Create a wiki page. If there is already a page, you can skip. The page can be a draft. - Add this shortcode to a post/page, view it and move the mouse over the...

3.5CVSS0.2AI score0.00547EPSS
Exploits1
Rows per page
Query Builder