Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The Data Visualizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'visualize' shortcode in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated…
Opis źródłowy NVD · ENCVSS 6,4 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
The Hide Email Address plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'inline_css' parameter in the `bg-hide-email-address` shortcode in all versions up to, and including, 0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This…
Opis źródłowy NVD · ENCVSS 6,4 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
The Simple Nivo Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode parameter in all versions up to, and including, 0.5.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with…
Opis źródłowy NVD · ENCVSS 6,4 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
The WPGancio plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gancio-event' shortcode in all versions up to, and including, 1.12 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated…
Opis źródłowy NVD · ENCVSS 6,4 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
The GPXpress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gpxpress' shortcode in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers,…
Opis źródłowy NVD · ENCVSS 6,4 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
The Easy Map Creator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width' parameter in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access…
Opis źródłowy NVD · ENCVSS 6,4 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_images (file_info[2] = title)' parameter in all versions up to, and including, 2.8.190 due to insufficient input sanitization and output…
Opis źródłowy NVD · ENCVSS 6,4 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
Backstage is an open framework for building developer portals. Prior to 0.6.17, the @backstage/plugin-proxy-backend package is affected by improper input validation in proxy-backend. An authenticated Backstage user could craft a request URL that causes the proxy-backend to forward the request to a…
Opis źródłowy NVD · ENCVSS 6,4 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_title' parameter in all versions up to, and including, 2.8.190 due to insufficient input sanitization and output escaping. This makes it…
Opis źródłowy NVD · ENCVSS 6,4 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
The PO/MO Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'podata' parameter in all versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and…
Opis źródłowy NVD · ENCVSS 6,4 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
The Booking Package plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in all versions up to, and including, 1.7.29 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access…
Opis źródłowy NVD · ENCVSS 6,4 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post_meta Shortcode in all versions up to, and including, 6.2.0 due to insufficient input sanitization and output escaping. This makes it possible for…
Opis źródłowy NVD · ENCVSS 6,4 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Readonly User Field via [pmpro_member_profile_edit] Shortcode in all versions up to, and including, 3.8.1 due to insufficient input…
Opis źródłowy NVD · ENCVSS 6,4 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
CVSS
6,4
EPSS
0,26 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
The Data Visualizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'visualize' shortcode in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,4 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
The Hide Email Address plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'inline_css' parameter in the `bg-hide-email-address` shortcode in all versions up to, and including, 0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,4 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
The Simple Nivo Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode parameter in all versions up to, and including, 0.5.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,4 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
The WPGancio plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gancio-event' shortcode in all versions up to, and including, 1.12 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,4 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
The GPXpress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gpxpress' shortcode in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,4 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
The Easy Map Creator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width' parameter in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,4 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_images (file_info[2] = title)' parameter in all versions up to, and including, 2.8.190 due to insufficient input sanitization and output…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,4 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
Backstage is an open framework for building developer portals. Prior to 0.6.17, the @backstage/plugin-proxy-backend package is affected by improper input validation in proxy-backend. An authenticated Backstage user could craft a request URL that causes the proxy-backend to forward the request to a…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,4 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_title' parameter in all versions up to, and including, 2.8.190 due to insufficient input sanitization and output escaping. This makes it…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,4 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
The PO/MO Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'podata' parameter in all versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,4 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
The Booking Package plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in all versions up to, and including, 1.7.29 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,4 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post_meta Shortcode in all versions up to, and including, 6.2.0 due to insufficient input sanitization and output escaping. This makes it possible for…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,4 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Readonly User Field via [pmpro_member_profile_edit] Shortcode in all versions up to, and including, 3.8.1 due to insufficient input…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,4 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
6,4
0,26 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOpóźnione lub nieustalone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOpóźnione lub nieustaloneData modelu znajduje się przy rekordzie.