Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The Reviews Sorted plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'space' parameter of the [reviews-slider] shortcode in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
Opis źródłowy NVD · ENCVSS 6,4 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
Vite is a frontend tooling framework for JavaScript. Prior to 6.4.4, 7.3.7, 8.1.6, 8.2.4, and 8.3.3, import analysis can record a root-relative browser URL in safeModulePaths instead of the cleaned resolved module identifier. On a network-accessible, non-Windows development server, an imported…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,85 % · rekomendacja wg zapisanej polityki
The Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the multiple blocks in all versions up to, and including, 4.0.2 due to insufficient input sanitization and output escaping. This makes it possible for…
Opis źródłowy NVD · ENCVSS 6,4 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
The FundEngine – Donation and Crowdfunding Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wfp_featured_video_url' parameter in all versions up to, and including, 1.8.1 due to insufficient input sanitization and output escaping. This makes it possible for…
Opis źródłowy NVD · ENCVSS 6,4 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cozyHoverEffect Block Attribute in all versions up to, and including, 2.2.16 due to insufficient input sanitization and output…
Opis źródłowy NVD · ENCVSS 6,4 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the post_thumbnail (and newsletters_post_thumbnail) shortcodes in versions up to and including 4.15. This is due to insufficient input sanitization and output escaping in the…
Opis źródłowy NVD · ENCVSS 6,4 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'target' attribute of the [newsletters_post] shortcode in versions up to and including 4.15. This is due to insufficient input sanitization and output escaping in the posts_single() function which…
Opis źródłowy NVD · ENCVSS 6,4 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 1.10.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
Opis źródłowy NVD · ENCVSS 6,4 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Reading Progress Global Color Settings in all versions up to, and including, 6.6.11 due to insufficient input sanitization and output escaping. This…
Opis źródłowy NVD · ENCVSS 6,4 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
The Fluent Support – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'redirect-to' Shortcode Attribute in all versions up to, and including, 2.3.0 due to insufficient input sanitization and output escaping. This makes it possible for…
Opis źródłowy NVD · ENCVSS 6,4 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
The Reviews Sorted plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'space' parameter of the [reviews-slider] shortcode in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,4 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
Vite is a frontend tooling framework for JavaScript. Prior to 6.4.4, 7.3.7, 8.1.6, 8.2.4, and 8.3.3, import analysis can record a root-relative browser URL in safeModulePaths instead of the cleaned resolved module identifier. On a network-accessible, non-Windows development server, an imported…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,85 % · rekomendacja wg zapisanej polityki
The Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the multiple blocks in all versions up to, and including, 4.0.2 due to insufficient input sanitization and output escaping. This makes it possible for…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,4 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
The FundEngine – Donation and Crowdfunding Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wfp_featured_video_url' parameter in all versions up to, and including, 1.8.1 due to insufficient input sanitization and output escaping. This makes it possible for…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,4 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cozyHoverEffect Block Attribute in all versions up to, and including, 2.2.16 due to insufficient input sanitization and output…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,4 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the post_thumbnail (and newsletters_post_thumbnail) shortcodes in versions up to and including 4.15. This is due to insufficient input sanitization and output escaping in the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,4 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'target' attribute of the [newsletters_post] shortcode in versions up to and including 4.15. This is due to insufficient input sanitization and output escaping in the posts_single() function which…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,4 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 1.10.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,4 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Reading Progress Global Color Settings in all versions up to, and including, 6.6.11 due to insufficient input sanitization and output escaping. This…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,4 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
The Fluent Support – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'redirect-to' Shortcode Attribute in all versions up to, and including, 2.3.0 due to insufficient input sanitization and output escaping. This makes it possible for…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,4 · EPSS 0,34 % · rekomendacja wg zapisanej polityki