2014-11-25

2014-11-26

2014-11-27

All (2) Critical (2) High (7) Medium (15) Low (2)

CVE-2014-9098 Nov 26, 15:59 LOW POC Monitor

Multiple cross-site scripting (XSS) vulnerabilities in the Apptha WordPress Video Gallery (contus-video-gallery) plugin 2.5, possibly before 2014-07-23, for WordPress allow remote authenticated users. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP WordPress XSS Contus Video Gallery Apptha

NVD Exploit-DB

CVSS 2.0

3.5

EPSS

0.2%

CVE-2014-6093 Nov 26, 02:59 LOW Monitor

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.0.x before 7.0.0.2 CF29, 8.0.x through 8.0.0.1 CF14, and 8.5.x before 8.5.0 CF02 allows remote authenticated users to inject. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. No vendor patch available.

XSS IBM Websphere Portal

NVD

CVSS 2.0

3.5

EPSS

0.3%