Export limit exceeded: 237700 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 237700 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (24325 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2022-36244 | 1 Shopbeat | 1 Shop Beat Media Player | 2025-01-13 | 5.4 Medium |
| Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 suffers from Multiple Stored Cross-Site Scripting (XSS) vulnerabilities via Shop Beat Control Panel found at www.shopbeat.co.za controlpanel.shopbeat.co.za. | ||||
| CVE-2023-6103 | 1 Intelbras | 2 Rx 1500, Rx 1500 Firmware | 2025-01-08 | 2.4 Low |
| A vulnerability has been found in Intelbras RX 1500 1.1.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /WiFi.html of the component SSID Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-245065 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. | ||||
| CVE-2023-47697 | 1 Wp-eventmanager | 1 Wp Event Manager | 2025-01-08 | 7.1 High |
| Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Event Manager WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin <= 3.1.39 versions. | ||||
| CVE-2023-47696 | 1 Gravitymaster | 1 Product Enquiry For Woocommerce | 2025-01-08 | 7.1 High |
| Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Gravity Master Product Enquiry for WooCommerce plugin <= 3.0 versions. | ||||
| CVE-2023-47695 | 1 Scribit | 1 Shortcodes Finder | 2025-01-08 | 7.1 High |
| Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Scribit Shortcodes Finder plugin <= 1.5.3 versions. | ||||
| CVE-2024-28237 | 1 Octoprint | 1 Octoprint | 2025-01-08 | 4 Medium |
| OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to configure or talk a victim with administrator rights into configuring a webcam snapshot URL which when tested through the "Test" button included in the web interface will execute JavaScript code in the victims browser when attempting to render the snapshot image. An attacker who successfully talked a victim with admin rights into performing a snapshot test with such a crafted URL could use this to retrieve or modify sensitive configuration settings, interrupt prints or otherwise interact with the OctoPrint instance in a malicious way. The vulnerability is patched in version 1.10.0rc3. OctoPrint administrators are strongly advised to thoroughly vet who has admin access to their installation and what settings they modify based on instructions by strangers. | ||||
| CVE-2023-47654 | 1 Livescore | 1 Bzscore | 2025-01-07 | 6.5 Medium |
| Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in livescore.Bz BZScore – Live Score plugin <= 1.03 versions. | ||||
| CVE-2023-47549 | 1 Spider-themes | 1 Eazydocs | 2025-01-07 | 6.8 Medium |
| Unauth. Reflected Cross-Site Scripting (XSS) vulnerability on 302 response page in spider-themes EazyDocs plugin <= 2.3.3 versions. | ||||
| CVE-2023-47532 | 1 Themeum | 1 Wp Crowdfunding | 2025-01-07 | 5.8 Medium |
| Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Themeum WP Crowdfunding plugin <= 2.1.6 versions. | ||||
| CVE-2023-47528 | 1 Sajjad67 | 1 Wp Edit Username | 2025-01-07 | 5.9 Medium |
| Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Sajjad Hossain Sagor WP Edit Username plugin <= 1.0.5 versions. | ||||
| CVE-2015-10118 | 1 Wp-copyprotect Project | 1 Wp-copyprotect | 2025-01-06 | 3.5 Low |
| A vulnerability classified as problematic was found in cchetanonline WP-CopyProtect up to 3.0.0. This vulnerability affects the function CopyProtect_options_page of the file wp-copyprotect.php. The manipulation of the argument CopyProtect_nrc_text leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 3.1.0 is able to address this issue. The patch is identified as 8b8fe4102886b326330dc1ff06b17313fb10aee5. It is recommended to upgrade the affected component. VDB-231202 is the identifier assigned to this vulnerability. | ||||
| CVE-2021-31280 | 1 Tp5cms Project | 1 Tp5cms | 2025-01-03 | 6.1 Medium |
| An issue was discovered in tp5cms through 2017-05-25. admin.php/system/set.html has XSS via the keywords parameter. | ||||
| CVE-2020-22402 | 1 Alinto | 1 Sogo Web Mail | 2025-01-03 | 6.1 Medium |
| Cross Site Scripting (XSS) vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive information when a user reads an email containing malicious code. | ||||
| CVE-2020-24723 | 1 Phpgurukul | 1 User Registration \& Login And User Management System | 2024-12-27 | 4.8 Medium |
| Cross Site Scripting (XSS) vulnerability in the Registration page of the admin panel in PHPGurukul User Registration & Login and User Management System With admin panel 2.1. | ||||
| CVE-2021-24561 | 1 Veronalabs | 1 Wp Sms | 2024-12-17 | 5.4 Medium |
| The WP SMS WordPress plugin before 5.4.13 does not sanitise the "wp_group_name" parameter before outputting it back in the "Groups" page, leading to an Authenticated Stored Cross-Site Scripting issue | ||||
| CVE-2024-55268 | 1 Phpgurukul | 1 Covid 19 Testing Management System | 2024-12-11 | 6.1 Medium |
| A Reflected Cross Site Scripting (XSS) vulnerability was found in /covidtms/registered-user-testing.php in PHPGurukul COVID 19 Testing Management System 1.0 which allows remote attackers to execute arbitrary code via the regmobilenumber parameter. | ||||
| CVE-2024-48703 | 1 Anujk305 | 1 Medical Card Generation System | 2024-12-11 | 4.8 Medium |
| PhpGurukul Medical Card Generation System v1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/search-medicalcard.php via the searchdata parameter. | ||||
| CVE-2020-20725 | 1 Taogogo | 1 Taocms | 2024-12-11 | 6.1 Medium |
| Cross Site Scripting vulnerability in taogogo taoCMS v.2.5 beta5.1 allows remote attacker to execute arbitrary code via the name field in admin.php. | ||||
| CVE-2020-20070 | 1 Diaowen | 1 Dwsurvey | 2024-12-11 | 6.1 Medium |
| Cross Site Scripting vulnerability found in wkeyuan DWSurvey 1.0 allows a remote attacker to execute arbitrary code via thequltemld parameter of the qu-multi-fillblank!answers.action file. | ||||
| CVE-2024-12001 | 2 Anisha, Codeprojects | 2 Wazifa System, Wazifa System | 2024-12-10 | 3.5 Low |
| A vulnerability classified as problematic has been found in code-projects Wazifa System 1.0. Affected is an unknown function of the file /controllers/updatesettings.php of the component Setting Handler. The manipulation of the argument firstname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. | ||||