XSS - CVE CyberSecurity Database News

May 17, 2023 XSS WordPress Exploit WordPress Foundation

CVE-2023-2745: WordPress Core Directory Traversal Vulnerability in Versions Up to 6.2 via 'wp_lang' Parameter - Exploit Details, Code Snippets, and References

A new vulnerability has been discovered in WordPress Core that affects versions up to, and including, 6.2. This vulnerability, assigned the Common Vulnerabilities and

May 10, 2023 XSS Exploit WP Engine Advanced Custom Fields Pro

CVE-2023-30777 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability discovered in WP Engine Advanced Custom Fields Pro, WP Engine Advanced Custom Fields plugins <= 6.1.5 versions

In today's scenario, web applications are an integral part of our lives - we use them for shopping, banking, social networking, and even as essential

Apr 18, 2023 XSS WordPress WHA WHA Puzzle

CVE-2022-45839 Exploiting Stored Cross-Site Scripting (XSS) in WHA WHA Puzzle Plugin <= 1..9 Versions

Stored Cross-Site Scripting (XSS) vulnerabilities can be a major security concern as they allow hackers to inject malicious scripts into otherwise trusted websites. Recently, a

Apr 17, 2023 XSS WordPress Exploit PHP

CVE-2023-1473 - Reflected Cross-Site Scripting Vulnerability in MetaSlider WordPress Plugin 3.29.

WordPress is one of the most popular content management systems used worldwide, powering millions of websites. This makes it an attractive target for hackers, who

Apr 16, 2023 XSS WordPress Code Tides Advanced Floating Content

CVE-2022-43458 - Cross-Site Scripting (XSS) Vulnerability in Code Tides Advanced Floating Content Plugin Affecting Versions <= 1.2.1

A recent vulnerability, CVE-2022-43458, has been identified in the popular WordPress plugin, Advanced Floating Content by Code Tides. Versions up to and including 1.2.