Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The Nouri.sh Newsletter plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` parameter in all versions up to, and including, 1.0.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
The CoSign Single Signon plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` parameter in all versions up to, and including, 0.3.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
The Clik stats plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` parameter in all versions up to, and including, 0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
OWASP Java HTML Sanitizer is a configureable HTML Sanitizer written in Java, allowing inclusion of HTML authored by third-parties in web applications while protecting against XSS. In version 20240325.1, OWASP java html sanitizer is vulnerable to XSS if HtmlPolicyBuilder allows noscript and style…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
The WP Twitter Auto Publish plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PostMessage in all versions up to, and including, 1.7.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/customer-list.php. The manipulation of the argument Name leads to cross site scripting. The attack may be initiated remotely. The exploit is…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in Campcodes Retro Basketball Shoes Online Store 1.0. Affected by this issue is some unknown functionality of the file /admin/admin_running.php. Executing a manipulation of the argument product_name can lead to cross site scripting. The attack may be performed from…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
The Nouri.sh Newsletter plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` parameter in all versions up to, and including, 1.0.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
The CoSign Single Signon plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` parameter in all versions up to, and including, 0.3.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
The Clik stats plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` parameter in all versions up to, and including, 0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
OWASP Java HTML Sanitizer is a configureable HTML Sanitizer written in Java, allowing inclusion of HTML authored by third-parties in web applications while protecting against XSS. In version 20240325.1, OWASP java html sanitizer is vulnerable to XSS if HtmlPolicyBuilder allows noscript and style…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
The WP Twitter Auto Publish plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PostMessage in all versions up to, and including, 1.7.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/customer-list.php. The manipulation of the argument Name leads to cross site scripting. The attack may be initiated remotely. The exploit is…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in Campcodes Retro Basketball Shoes Online Store 1.0. Affected by this issue is some unknown functionality of the file /admin/admin_running.php. Executing a manipulation of the argument product_name can lead to cross site scripting. The attack may be performed from…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,25 % · rekomendacja wg zapisanej polityki