Show filters
614 Total Results
Displaying 91-100 of 614
Sort by:
Attacker Value
Unknown
CVE-2023-47516
Disclosure Date: November 13, 2023 (last updated November 17, 2023)
Cross-Site Request Forgery (CSRF) vulnerability in Stark Digital Category Post List Widget allows Stored XSS.This issue affects Category Post List Widget: from n/a through 2.0.
0
Attacker Value
Unknown
CVE-2023-28173
Disclosure Date: November 12, 2023 (last updated November 17, 2023)
Cross-Site Request Forgery (CSRF) vulnerability in Amit Agarwal Google XML Sitemap for Images plugin <= 2.1.3 versions.
0
Attacker Value
Unknown
CVE-2023-47164
Disclosure Date: November 10, 2023 (last updated November 17, 2023)
Cross-site scripting vulnerability in HOTELDRUID 3.0.5 and earlier allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product.
0
Attacker Value
Unknown
CVE-2023-5567
Disclosure Date: November 07, 2023 (last updated November 15, 2023)
The QR Code Tag plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'qrcodetag' shortcode in versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
0
Attacker Value
Unknown
CVE-2023-46204
Disclosure Date: October 25, 2023 (last updated November 02, 2023)
Cross-Site Request Forgery (CSRF) vulnerability in Muller Digital Inc. Duplicate Theme plugin <= 0.1.6 versions.
0
Attacker Value
Unknown
CVE-2023-45065
Disclosure Date: October 18, 2023 (last updated October 26, 2023)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Mad Fish Digital Bulk NoIndex & NoFollow Toolkit plugin <= 1.42 versions.
0
Attacker Value
Unknown
CVE-2023-44245
Disclosure Date: October 02, 2023 (last updated October 09, 2023)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Leap Contractor Contact Form Website to Workflow Tool plugin <= 4.0.0 versions.
0
Attacker Value
Unknown
CVE-2023-40605
Disclosure Date: September 27, 2023 (last updated October 08, 2023)
Auth. (contributor) Cross-Site Scripting (XSS) vulnerability in 93digital Typing Effect plugin <= 1.3.6 versions.
0
Attacker Value
Unknown
CVE-2023-43377
Disclosure Date: September 20, 2023 (last updated October 08, 2023)
A cross-site scripting (XSS) vulnerability in /hoteldruid/visualizza_contratto.php of Hoteldruid v3.0.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the destinatario_email1 parameter.
0
Attacker Value
Unknown
CVE-2023-43376
Disclosure Date: September 20, 2023 (last updated October 08, 2023)
A cross-site scripting (XSS) vulnerability in /hoteldruid/clienti.php of Hoteldruid v3.0.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the nometipotariffa1 parameter.
0
