Glossary

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-13362 May 01, 05:29 MEDIUM This Month

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress XSS Image Alt Text Manager Bulk Dynamic Alt Tags For Image Seo Optimization Ai Wpbits Addons For Elementor Page Builder Unlimited Elements For Elementor +166

NVD

CVSS 3.1

6.1

EPSS

0.1%

CVE-2023-24378 Apr 06, 14:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Glossary

NVD

CVSS 3.1

5.4

EPSS

0.4%

CVE-2012-2339 May 21, 20:55 MEDIUM This Month

Cross-site scripting (XSS) vulnerability in the Glossary module 6.x-1.x before 6.x-1.8 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

XSS Drupal Glossary Nancy Wichmann

NVD

CVSS 2.0

4.3

EPSS

0.9%

CVE-2024-13362

EPSS 0% CVSS 6.1

MEDIUM This Month

WordPress XSS Image Alt Text Manager Bulk Dynamic Alt Tags For Image Seo Optimization Ai +168

NVD

CVE-2023-24378

EPSS 0% CVSS 5.4

MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Glossary

NVD

CVE-2012-2339

EPSS 1% CVSS 4.3

MEDIUM This Month

XSS Drupal Glossary +1

NVD