Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 26

Export CSV
CVE-2024-1273

Starbox < 3.5.0 - Contributor+ Stored XSS

The Starbox WordPress plugin before 3.5.0 does not sanitise and escape some parameters, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Squirrly
Products
Starbox
CVE-2024-10515

SEO Plugin by Squirrly SEO < 12.3.21 - Editor+ Stored XSS

In the process of testing the SEO Plugin by Squirrly SEO WordPress plugin before 12.3.21, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Squirrly
Products
Seo Plugin By Squirrly Seo
CVE-2024-43286

WordPress Squirrly SEO plugin <= 12.3.19 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.3.19.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Squirrly
Products
Seo Plugin By Squirrly Seo
CVE-2022-45065

WordPress SEO Plugin by Squirrly SEO Plugin <= 12.1.20 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Squirrly SEO Plugin by Squirrly SEO plugin <= 12.1.20 versions.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Squirrly
Products
Seo Plugin By Squirrly Seo
CVE-2021-25019

SEO Plugin by Squirrly SEO < 11.1.12 - Reflected Cross-Site Scripting

The SEO Plugin by Squirrly SEO WordPress plugin before 11.1.12 does not escape the type parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Squirrly
Products
Seo Plugin By Squirrly Seo
CVE-2024-8239

Starbox < 3.5.3 - Contributor+ Stored XSS

The Starbox WordPress plugin before 3.5.3 does not properly render social media profiles URLs in certain contexts, like the malicious user's profile or pages where the starbox shortcode is used, which may be abused by users with at least the contributor role to conduct Stored XSS attacks.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Squirrly Squirrlyuk
Products
Starbox Starbox