Lucene search

Onepage Builder Security Vulnerabilities - November

cve

CVE-2023-38391

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themesgrove Onepage Builder allows SQL Injection.This issue affects Onepage Builder: from n/a through 2.4.1.

7.2CVSS

7.3AI Score

0.001EPSS

2023-11-04 12:15 AM

cve

CVE-2024-33908

Missing Authorization vulnerability in Themesgrove WidgetKit.This issue affects WidgetKit: from n/a through 2.5.0.

5.3CVSS

6.3AI Score

0.0004EPSS

2024-05-06 08:15 PM

cve

CVE-2024-34548

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themesgrove WidgetKit allows Stored XSS.This issue affects WidgetKit: from n/a through 2.4.8.

6.5CVSS

6.6AI Score

0.0004EPSS

2024-05-08 12:15 PM

cve

CVE-2024-37428

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themesgrove WidgetKit allows Stored XSS.This issue affects WidgetKit: from n/a through 2.5.0.

6.5CVSS

6.5AI Score

0.0004EPSS

2024-07-22 09:15 AM