Lucene search
+L
NucleiRecent

4298 matches found

Nuclei
Nuclei
•added 2026/08/24 10:21 p.m.•5 views

Keycloak < 26.7.2 - Unauthenticated Account Takeover via Reset-Credentials Bypass

Keycloak versions prior to 26.7.2, 26.6.6, and 26.4.15 contain a flaw in the reset-credentials flow that allows an unauthenticated attacker to bypass email verification and take over any user account. Two bugs are chained: 1 the tryAnotherWay handler stores a generic "true" selector note not scop...

9.1CVSS5.8AI score0.00391EPSS
SaveExploits3References5
Nuclei
Nuclei
•added 2026/08/24 9:52 p.m.•20 views

User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Attachment Deletion

The WP User Frontend plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check in the FrontendFormAjax::submitpost function. This makes it possible for unauthenticated attackers to delete attachment records through the plugin's AJAX handling when a public...

5.3CVSS5.3AI score0.0063EPSS
SaveExploits1References5
Nuclei
Nuclei
•added 2026/08/24 7:55 p.m.•4 views

WPAdverts <= 2.3.2 - Information Disclosure

WPAdverts – Classifieds Plugin for WordPress = 2.3.2 contains an authorization bypass caused by improper user authorization verification in classifieds-types REST endpoint, letting unauthenticated attackers retrieve internal site configuration data, exploit requires no authentication. id:...

7.5CVSS5.2AI score0.003EPSS
SaveExploits0References3
Nuclei
Nuclei
•added 2026/08/24 7:55 p.m.•4 views

RegistrationMagic <= 6.0.7.1 - Privilege Escalation

RegistrationMagic WordPress plugin = 6.0.7.1 contains a privilege escalation caused by improper access control in 'addmenu' via 'rmuserexists' AJAX action, letting unauthenticated attackers manipulate admin menu capabilities, exploit requires subscriber user for further escalation. id:...

9.8CVSS5.1AI score0.00469EPSS
SaveExploits2References3
Nuclei
Nuclei
•added 2026/08/24 7:47 p.m.•4 views

Branda WordPress plugin - Privilege Escalation

Branda WordPress plugin = 3.4.24 contains a privilege escalation caused by improper user identity validation in password update functionality, letting unauthenticated attackers change arbitrary user passwords, including administrators, exploit requires crafted request. id: CVE-2025-14998 info:...

9.8CVSS5.4AI score0.00563EPSS
SaveExploits1References1
Nuclei
Nuclei
•added 2026/08/24 7:47 p.m.•4 views

ConnectWise ScreenConnect <= 23.9.7 - Path Traversal

ConnectWise ScreenConnect 23.9.7 and prior contain a path traversal caused by improper handling of user input, letting attackers execute remote code or access confidential data, exploit requires network access. id: CVE-2024-1708 info: name: ConnectWise ScreenConnect = 23.9.7 - Path Traversal...

8.4CVSS9.3AI score0.87558EPSS
SaveExploits6References4
Nuclei
Nuclei
•added 2026/08/24 12:11 p.m.•3 views

LottieFiles for Gutenberg <= 3.0.0 - Unauthenticated Settings Disclosure

The LottieFiles – Lottie block for Gutenberg plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.0 via the /wp-json/lottiefiles/v1/settings/ REST API endpoint. This makes it possible for unauthenticated attackers to retrieve the site...

5.3CVSS5.3AI score0.00305EPSS
SaveExploits0References3
Nuclei
Nuclei
•added 2026/08/24 12:11 p.m.•4 views

Concrete CMS <9.5.1 - Unauthenticated File-Usage Internal Metadata Disclosure

Concrete CMS 9.5.0 and below is vulnerable to IDOR combined with a missing authentication gate. The endpoint /ccm/system/dialogs/file/usage/fID accepts an integer file ID in the URL and returns internal site structure data page IDs, versions, URL paths to anyone who sends a GET request. id:...

6.3CVSS5.3AI score0.00202EPSS
SaveExploits0References1
Nuclei
Nuclei
•added 2026/08/24 12:10 p.m.•4 views

SeaweedFS <= 4.29 - Path Traversal File Write

SeaweedFS versions through 4.29 build the S3 API and Iceberg REST catalog routers with mux.NewRouter.SkipCleantrue, which disables URL path cleaning. A .. segment in the request path therefore survives routing and reaches the handlers unnormalised, so a request such as PUT...

10CVSS8.6AI score0.00385EPSS
SaveExploits2References3
Nuclei
Nuclei
•added 2026/08/24 12:10 p.m.•8 views

LolLMS <= 2.2.0 - Unauthenticated File Upload

A vulnerability in parisneo/lollms up to and including version 2.2.0 allows unauthenticated users to upload and process files through the /api/files/extract-text endpoint. The endpoint lacks the Dependsgetcurrentactiveuser dependency used by other file-related APIs. id: CVE-2026-0558 info: name:...

9.8CVSS7.6AI score0.01702EPSS
SaveExploits1References3
Nuclei
Nuclei
•added 2026/08/24 12:10 p.m.•5 views

Pods <= 3.3.9 - Unauthenticated Privilege Escalation via pods_admin AJAX Router

The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The vulnerability exists because the podsadmin AJAX router funnels every access check — including the method allowlist, nonce...

9.8CVSS5.5AI score0.00498EPSS
SaveExploits2References3
Nuclei
Nuclei
•added 2026/08/24 12:08 p.m.•3 views

SMS Alert – SMS & OTP for WooCommerce - Privilege Escalation

The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.9.5. This is due to the plugin not properly validating a user's identity prior to updati...

9.8CVSS5.6AI score0.00515EPSS
SaveExploits1References4
Nuclei
Nuclei
•added 2026/08/24 8:54 a.m.•10 views

LiteLLM < 1.25.0 - Remote Code Execution

LiteLLM before 1.25.0 allows authenticated users with the master API key to execute arbitrary Python code through the /guardrails/testcustomcode endpoint intended for custom guardrail testing. The endpoint’s insufficient filtering mechanisms can be bypassed, allowing attackers to abuse Python’s...

8.8CVSS6.8AI score0.06496EPSS
SaveExploits2References3
Nuclei
Nuclei
•added 2026/08/24 6:28 a.m.•5 views

OpenTSDB <= 2.4.1 - Unauthenticated RCE via Gnuplot Injection

OpenTSDB contains a command injection caused by insufficient validation of parameters passed to the legacy HTTP query API, letting attackers inject crafted OS commands and execute malicious code, exploit requires sending crafted parameters. id: CVE-2023-25826 info: name: OpenTSDB = 2.4.1 -...

9.8CVSS5.4AI score0.35604EPSS
SaveExploits4References4
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•86 views

HashiCorp Consul/Consul Enterprise - Server-Side Request Forgery

HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11 are susceptible to server-side request forgery. When redirects are returned by HTTP health check endpoints, Consul follows these HTTP redirects by default. An attacker can possibly obtain sensitive information, modify data,...

7.5CVSS6.9AI score0.08676EPSS
SaveExploits0References5
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•64 views

Microweber Information Disclosure

Microweber contains a vulnerability that allows exposure of sensitive information to an unauthorized actor in Packagist microweber/microweber prior to 1.2.11. id: CVE-2022-0281 info: name: Microweber Information Disclosure author: pikpikcu severity: high description: Microweber contains a...

7.5CVSS7.2AI score0.1201EPSS
SaveExploits1References5
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•65 views

Header Footer Code Manager < 1.1.24 - Cross-Site Scripting

The Header Footer Code Manager WordPress plugin before 1.1.24 does not escape generated URLs before outputting them back in attributes in an admin page, leading to a Reflected Cross-Site Scripting. id: CVE-2022-0899 info: name: Header Footer Code Manager 1.1.24 - Cross-Site Scripting author:...

6.1CVSS6.1AI score0.01323EPSS
SaveExploits2References2
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•85 views

Rukovoditel <= 3.2.1 - Cross Site Scripting

Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting XSS vulnerability in the Highlight Row feature at /index.php?module=entities/listingtypes&entitiesid=24. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the...

5.4CVSS5.6AI score0.00961EPSS
SaveExploits1References4
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•103 views

RaspAP 2.8.7 - Unauthenticated Command Injection

A Command injection vulnerability in RaspAP 2.8.0 thru 2.8.7 allows unauthenticated attackers to execute arbitrary commands via the cfgid parameter in /ajax/openvpn/activateovpncfg.php and /ajax/openvpn/delovpncfg.php. id: CVE-2022-39986 info: name: RaspAP 2.8.7 - Unauthenticated Command Injectio...

9.8CVSS9.1AI score0.99034EPSS
SaveExploits3References5
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•84 views

Newsletter < 7.4.5 - Cross-Site Scripting

The Newsletter WordPress plugin before 7.4.5 does not sanitize and escape the $SERVER'REQUESTURI' before echoing it back in admin pages. Although this uses addslashes, and most modern browsers automatically URLEncode requests, this is still vulnerable to Reflected XSS in older browsers such as...

6.1CVSS5.9AI score0.01905EPSS
SaveExploits2References4
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•81 views

Nagios XI <5.8.5 - Open Redirect

Nagios XI through 5.8.5 contains an open redirect vulnerability in the login function. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2022-29272 info: name: Nagios XI 5.8.5 - Open Redirect...

6.1CVSS6.2AI score0.04038EPSS
SaveExploits0References5
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•96 views

Wavlink WN-533A8 - Cross-Site Scripting

Wavlink WN-533A8 M33A8.V5030.190716 contains a reflected cross-site scripting vulnerability via the loginpage parameter. id: CVE-2022-34048 info: name: Wavlink WN-533A8 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Wavlink WN-533A8 M33A8.V5030.190716 contains a...

6.1CVSS5.7AI score0.06461EPSS
SaveExploits4References5
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•54 views

ILIAS eLearning <7.16 - Open Redirect

ILIAS eLearning before 7.16 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2022-45917 info: name: ILIAS eLearning 7.16 - Open Redirect author:...

6.1CVSS6.2AI score0.0199EPSS
SaveExploits3References5
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•86 views

Mastodon Prototype Pollution Vulnerability

The GitHub repository mastodon/mastodon prior to 3.5.0 contains a Prototype Pollution vulnerability. id: CVE-2022-0432 info: name: Mastodon Prototype Pollution Vulnerability author: pikpikcu severity: medium description: The GitHub repository mastodon/mastodon prior to 3.5.0 contains a Prototype...

7.4CVSS6.7AI score0.04429EPSS
SaveExploits1References5
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•99 views

WordPress Elementor Website Builder <3.1.4 - Cross-Site Scripting

WordPress Elementor Website Builder plugin before 3.1.4 contains a DOM cross-site scripting vulnerability. It does not sanitize or escape user input appended to the DOM via a malicious hash. id: CVE-2021-24891 info: name: WordPress Elementor Website Builder 3.1.4 - Cross-Site Scripting author:...

6.1CVSS5.7AI score0.25136EPSS
SaveExploits1References4
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•65 views

myfactory FMS - Cross-Site Scripting

myfactory.FMS before 7.1-912 allows cross-site scripting via the Error parameter. id: CVE-2021-42566 info: name: myfactory FMS - Cross-Site Scripting author: madrobot,daffainfo severity: medium description: | myfactory.FMS before 7.1-912 allows cross-site scripting via the Error parameter. impact...

6.1CVSS5.7AI score0.05832EPSS
SaveExploits3References2
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•62 views

D-Link DIR-605 - Information Disclosure

An informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version - 2.01MT. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page id: CVE-2021-40655 info: name: D-Link DIR-605 - Information Disclosure author: DhiyaneshDK severity: high...

7.5CVSS7.9AI score0.86659EPSS
SaveExploits1References2
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•95 views

LearnPress Plugin < 4.2.0 - Unauthenticated Time-Based Blind SQLi

SQL Injection vulnerability in LearnPress – WordPress LMS Plugin = 4.1.7.3.2 versions. id: CVE-2022-45808 info: name: LearnPress Plugin 4.2.0 - Unauthenticated Time-Based Blind SQLi author: DhiyaneshDK severity: critical description: | SQL Injection vulnerability in LearnPress – WordPress LMS...

9.9CVSS9.3AI score0.04269EPSS
SaveExploits2References2
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•53 views

WAVLINK WN533A8 - Improper Access Control

WAVLINK WN533A8 M33A8.V5030.190716 is susceptible to improper access control. An attacker can obtain usernames and passwords via view-source:http://IPADDRESS/sysinit.shtml?r=52300 and searching for logincheckuser; and thereby possibly obtain sensitive information, modify data, and/or execute...

7.5CVSS7.6AI score0.20351EPSS
SaveExploits4References5
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•39 views

Zimbra Collaboration - Unrestricted File Upload

An issue was discovered in Zimbra Collaboration ZCS 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole extraction to /opt/zimbra/jetty/webapps/zimbra/public that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also,...

9.8CVSS9.1AI score0.95478EPSS
SaveExploits7References2
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•1046 views

Moodle LTI module Reflected - Cross-Site Scripting

A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's brows...

6.1CVSS5.7AI score0.04458EPSS
SaveExploits0References5
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•32 views

Apache ActiveMQ < 5.16.5/5.17.3 - Remote Code Execution

Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution. In details, in ActiveMQ configurations, jetty allows org.jolokia.http.AgentServlet to handler request to /api/jolokia org.jolokia.http.HttpRequestHandlerhandlePostRequest is able to create JmxRequest...

8.8CVSS8.2AI score0.8581EPSS
SaveExploits2References3
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•91 views

WordPress User Post Gallery <=2.19 - Remote Code Execution

WordPress User Post Gallery plugin through 2.19 is susceptible to remote code execution. The plugin does not limit which callback functions can be called by users, making it possible for an attacker execute malware, obtain sensitive information, modify data, and/or gain full control over a...

9.8CVSS9.2AI score0.42723EPSS
SaveExploits2References5
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•56 views

WordPress All-in-one Floating Contact Form <2.0.4 - Cross-Site Scripting

WordPress All-in-one Floating Contact Form, Call, Chat, and 50+ Social Icon Tabs plugin before 2.0.4 contains a reflected cross-site scripting vulnerability on the my-sticky-elements-leads admin page. id: CVE-2022-0148 info: name: WordPress All-in-one Floating Contact Form 2.0.4 - Cross-Site...

5.4CVSS5.2AI score0.01572EPSS
SaveExploits2References5
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•75 views

Users Ultra <= 3.1.0 - SQL Injection

The Users Ultra WordPress plugin through 3.1.0 fails to properly sanitize and escape the datatarget parameter before it is being interpolated in an SQL statement and then executed via the ratingvote AJAX action available to both unauthenticated and authenticated users, leading to an SQL Injection...

9.8CVSS9AI score0.0854EPSS
SaveExploits2References5
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•377 views

GeoServer <1.2.2 - Remote Code Execution

Programs run on GeoServer before 1.2.2 which use jt-jiffle and allow Jiffle script to be provided via network request are susceptible to remote code execution. The Jiffle script is compiled into Java code via Janino, and executed. In particular, this affects downstream GeoServer 1.1.22. id:...

10CVSS8.9AI score0.98518EPSS
SaveExploits1References5
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•26 views

Bonita Web 2021.2 - Authentication/Authorization Bypass

Bonita Web 2021.2 contains an authentication/authorization bypass vulnerability caused by an overly broad exclude pattern in RestAPIAuthorizationFilter, allowing unauthenticated users to access privileged API endpoints by appending ;i18ntranslation or /../i18ntranslation/ to the URL. id:...

9.8CVSS8.7AI score0.56724EPSS
SaveExploits1References3
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•63 views

CandidATS 3.0.0 - Cross-Site Scripting.

CandidATS 3.0.0 contains a cross-site scripting vulnerability via the sortBy parameter of the ajax.php resource. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

6.1CVSS6.1AI score0.01082EPSS
SaveExploits1References4
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•93 views

Linear eMerge E3-Series - Information Disclosure

Linear eMerge E3-Series devices are susceptible to information disclosure. Admin credentials are stored in clear text at the endpoint /test.txt in situations where the default admin credentials have been changed. An attacker can obtain admin credentials, access the admin dashboard, control buildi...

8.2CVSS8.7AI score0.06987EPSS
SaveExploits3References5
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•72 views

Gitea <1.16.5 - Open Redirect

Gitea before 1.16.5 is susceptible to open redirect via GitHub repository go-gitea/gitea. An attacker can redirect a user to a malicious site and potentially obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2022-1058 info: name: Gitea 1.16.5 - Open Redire...

7.2CVSS6.2AI score0.53177EPSS
SaveExploits1References3
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•45 views

Microweber <1.2.11 - Information Disclosure

Microweber before 1.2.11 is susceptible to information disclosure. An error message is generated in microweber/microweber which contains sensitive information while viewing comments from loadmodule:commentssearch=. An attacker can possibly obtain sensitive information, modify data, and/or execute...

9.4CVSS8.5AI score0.06923EPSS
SaveExploits1References5
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•63 views

Academy Learning Management System <5.9.1 - Cross-Site Scripting

Academy Learning Management System before 5.9.1 contains a cross-site scripting vulnerability via the Search parameter. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

6.1CVSS6AI score0.02406EPSS
SaveExploits2References5
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•73 views

WordPress Related Posts <2.1.3 - Stored Cross-Site Scripting

WordPress Related Posts plugin prior to 2.1.3 contains a cross-site scripting vulnerability in the rp4wpheadingtext parameter. User input is not properly sanitized, allowing the insertion of arbitrary code that can allow an attacker to steal cookie-based authentication credentials and launch othe...

5.5CVSS5.5AI score0.0119EPSS
SaveExploits1References5
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•90 views

Atom CMS v2.0 - Remote Code Execution

Atom CMS v2.0 was discovered to contain a remote code execution RCE vulnerability via /admin/uploads.php. id: CVE-2022-25487 info: name: Atom CMS v2.0 - Remote Code Execution author: theamanrawat severity: critical description: | Atom CMS v2.0 was discovered to contain a remote code execution RCE...

9.8CVSS9.4AI score0.53839EPSS
SaveExploits4References5
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•116 views

Photo Gallery by 10Web < 1.6.0 - SQL Injection

The Photo Gallery by 10Web WordPress plugin before 1.6.0 does not validate and escape the bwgtagidbwgthumbnails0 parameter before using it in a SQL statement via the bwgfrontenddata AJAX action available to unauthenticated and authenticated users, leading to an unauthenticated SQL injection id:...

9.8CVSS9.1AI score0.74615EPSS
SaveExploits4References4
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•52 views

WordPress Copyright Proof <=4.16 - Cross-Site-Scripting

WordPress Copyright Proof plugin 4.16 and prior contains a cross-site scripting vulnerability. It does not sanitize and escape a parameter before outputting it back via an AJAX action available to both unauthenticated and authenticated users when a specific setting is enabled. id: CVE-2022-1906...

6.1CVSS5.7AI score0.01117EPSS
SaveExploits2References4
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•75 views

WordPress Daily Prayer Time <2022.03.01 - SQL Injection

WordPress Daily Prayer Time plugin prior to 2022.03.01 contains a SQL injection vulnerability.. It does not sanitise and escape the month parameter before using it in a SQL statement via the getmonthlytimetable AJAX action, available to unauthenticated users, leading to SQL injection. id:...

9.8CVSS9AI score0.09276EPSS
SaveExploits2References5
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•64 views

WordPress Panda Pods Repeater Field <1.5.4 - Cross-Site Scripting

WordPress Panda Pods Repeater Field before 1.5.4 contains a cross-site scripting vulnerability. The plugin does not sanitize and escape a parameter before outputting it back in the page. This can be leveraged against a user who has at least Contributor permission. An attacker can also steal...

5.4CVSS5.3AI score0.00841EPSS
SaveExploits2References5
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•66 views

Atom CMS v2.0 - Cross-Site Scripting

Atom CMS v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the "A" parameter in /widgets/debug.php. id: CVE-2022-25489 info: name: Atom CMS v2.0 - Cross-Site Scripting author: theamanrawat severity: medium description: | Atom CMS v2.0 was discovered to contain ...

5.4CVSS5.2AI score0.01459EPSS
SaveExploits1References3
Nuclei
Nuclei
•added 2026/08/24 5:53 a.m.•77 views

Liferay Portal - Cross-site Scripting

A Cross-site scripting XSS vulnerability in the Portal Search module in Liferay Portal 7.1.0 through 7.4.2, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 15, and 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the tag parameter. id:...

6.1CVSS6.2AI score0.00897EPSS
SaveExploits0References3
Total number of security vulnerabilities4298