Catalog

Findings

Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/manage module.Vuln · CVE-2022-50968 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%May 10, 2026
Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the tickets/manage module.Vuln · CVE-2022-50967 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%May 10, 2026
Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the news/manage module.Vuln · CVE-2022-50966 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%May 10, 2026
Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the posts/manage module.Vuln · CVE-2022-50965 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%May 10, 2026
Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/loose module.Vuln · CVE-2022-50964 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%May 10, 2026
Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/active module.Vuln · CVE-2022-50963 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%May 10, 2026
Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the orders/myOrders module.Vuln · CVE-2022-50962 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%May 10, 2026
Medium5.1WordPress Plugin IP2Location Country Blocker 2.26.7 contains a stored cross-site scripting vulnerability that allows authenticated users to inject arbitrary JavaScript…Vuln · CVE-2022-50961 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.2%May 10, 2026
Medium5.1WordPress International SMS for Contact Form 7 Integration version 1.2 contains a reflected cross-site scripting vulnerability in the page parameter of the admin setti…Vuln · CVE-2022-50960 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.2%May 10, 2026
Medium5.1WordPress Contact Form Builder 1.6.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by explo…Vuln · CVE-2022-50959 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.2%May 10, 2026
Medium5.1WordPress Plugin Jetpack 9.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating…Vuln · CVE-2022-50958 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.2%May 10, 2026
Medium5.1Drupal avatar_uploader 7.x-1.0-beta8 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manip…Vuln · CVE-2022-50957 · avatar uploader project · avatar uploader · CVE.org · FIRST EPSS · NIST NVD · DrupalEPSS 0.2%May 10, 2026
Medium5.1WordPress Plugin Videos sync PDF 1.7.4 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by exploiti…Vuln · CVE-2022-50949 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.2%May 10, 2026
Medium5.1Motopress Hotel Booking Lite 4.2.4 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting p…Vuln · CVE-2022-50948 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%May 10, 2026
Medium5.1WordPress Plugin Testimonial Slider and Showcase 2.2.6 contains a stored cross-site scripting vulnerability that allows authenticated editors to inject malicious scrip…Vuln · CVE-2022-50947 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.2%May 10, 2026
Medium5.1WordPress Plugin Netroics Blog Posts Grid 1.0 contains a stored cross-site scripting vulnerability that allows authenticated editors to inject malicious scripts by fai…Vuln · CVE-2022-50946 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.2%May 10, 2026
Medium5.1WordPress 3dady Real-Time Web Stats plugin 1.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript…Vuln · CVE-2022-50945 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.2%May 10, 2026
Medium5.1Moodle LMS 4.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search parameter.Vuln · CVE-2022-50943 · moodle · moodle · CVE.org · FIRST EPSS · NIST NVD · MoodleEPSS 0.3%May 10, 2026
Medium5.1WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit C…Vuln · CVE-2021-47951 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.2%May 10, 2026
Medium5.1Advanced Guestbook 2.4.4 contains a persistent cross-site scripting vulnerability in the smilies administration interface that allows authenticated attackers to inject…Vuln · CVE-2021-47950 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%May 10, 2026
Medium5.1Projectsend r1295 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input in t…Vuln · CVE-2021-47947 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%May 10, 2026
Medium5.1Exponent CMS 2.6 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Title and Text Block…Vuln · CVE-2021-47931 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%May 10, 2026
Medium5.1Filterable Portfolio Gallery 1.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript by entering pa…Vuln · CVE-2021-47929 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%May 10, 2026
Medium5.1WordPress Plugin WP Symposium Pro 2021.10 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by explo…Vuln · CVE-2021-47927 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.2%May 10, 2026
Medium5.1Contact Form to Email 1.3.24 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by creating forms wit…Vuln · CVE-2021-47926 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%May 10, 2026