ivoschyk-cs/CVE-s

Releases0

Stars1

Newly found vulns

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2019-14364 ↗	Jul 28, 2019Sunday, 28 July 2019, 18:15	6.1 MEDIUM	4.3 MEDIUM
An XSS vulnerability in the "Email Subscribers & Newsletters" plugin 4.1.6 for WordPress allows an attacker to inject malicious JavaScript code through a publicly available subscription form using the esfpx_name wp-admin/admin-ajax.php POST parameter.
CVE-2019-13505 ↗	Jul 11, 2019Thursday, 11 July 2019, 13:15	6.1 MEDIUM	4.3 MEDIUM
The Appointment Hour Booking plugin 1.1.44 for WordPress allows XSS via the E-mail field, as demonstrated by email_1.