{"items":[{"id":"CVE-2022-28291","published":"2022-10-17T00:00:00.000Z","updated":"2025-05-13T19:57:34.629Z","title":"Insufficiently Protected Credentials: An authenticated user with debug privileges can retrieve stored Nessus policy credentials from the “nessusd” process in…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Nessus Professional","kev":false,"epss":0.00788,"kevAdded":null,"exploit":false},{"id":"CVE-2022-28290","published":"2022-04-25T16:31:01.000Z","updated":"2024-08-03T05:48:37.947Z","title":"Reflective Cross-Site Scripting vulnerability in WordPress Country Selector Plugin Version 1.6.5. The XSS payload executes whenever the user tries to access…","severity":"MEDIUM","score":6.1,"vendor":null,"product":"WordPress Country Selector Plugin","kev":false,"epss":0.01399,"kevAdded":null,"exploit":false},{"id":"CVE-2021-33853","published":"2022-03-16T14:03:37.000Z","updated":"2024-08-04T00:05:51.624Z","title":"A Cross-Site Scripting (XSS) attack can cause arbitrary code (javascript) to run in a user’s browser while the browser is connected to a trusted website. As…","severity":"MEDIUM","score":5.4,"vendor":null,"product":"X2CRM","kev":false,"epss":0.00576,"kevAdded":null,"exploit":false},{"id":"CVE-2021-33852","published":"2022-03-09T16:54:43.000Z","updated":"2024-08-04T00:05:51.022Z","title":"A cross-site scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user's browser and can use an application as the vehicle for the attack.…","severity":"MEDIUM","score":5.4,"vendor":null,"product":"WordPress Post Duplicator Plugin","kev":false,"epss":0.00636,"kevAdded":null,"exploit":false},{"id":"CVE-2021-33851","published":"2022-03-09T16:54:38.000Z","updated":"2024-08-04T00:05:51.654Z","title":"A cross-site scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user's browser and can use an application as the vehicle for the attack.…","severity":"MEDIUM","score":5.4,"vendor":null,"product":"WordPress Customize Login Image Plugin","kev":false,"epss":0.01318,"kevAdded":null,"exploit":false},{"id":"CVE-2021-33850","published":"2021-11-19T15:52:43.000Z","updated":"2024-08-04T00:05:51.078Z","title":"There is a Cross-Site Scripting vulnerability in Microsoft Clarity version 0.3. The XSS payload executes whenever the user changes the clarity configuration in…","severity":"MEDIUM","score":5.4,"vendor":null,"product":"Microsoft Clarity","kev":false,"epss":0.01598,"kevAdded":null,"exploit":false},{"id":"CVE-2021-33849","published":"2021-10-05T21:43:47.000Z","updated":"2024-08-04T00:05:51.043Z","title":"A Cross-Site Scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user’s browser while the browser is connected to a trusted website. The…","severity":"MEDIUM","score":5.4,"vendor":"Zoho","product":"Zoho CRM Lead Magnet","kev":false,"epss":0.01079,"kevAdded":null,"exploit":false},{"id":"CVE-2020-29321","published":"2021-06-04T19:40:19.000Z","updated":"2024-08-04T16:48:01.785Z","title":"The D-Link router DIR-868L 3.01 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated…","severity":"HIGH","score":7.5,"vendor":null,"product":"D-Link Router DIR-868L","kev":false,"epss":0.01354,"kevAdded":null,"exploit":false},{"id":"CVE-2020-29324","published":"2021-06-04T19:39:57.000Z","updated":"2024-08-04T16:48:01.633Z","title":"The DLink Router DIR-895L MFC v1.21b05 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an…","severity":"HIGH","score":7.5,"vendor":null,"product":"D-Link Router DIR-895L","kev":false,"epss":0.01073,"kevAdded":null,"exploit":false},{"id":"CVE-2020-29323","published":"2021-06-04T19:39:29.000Z","updated":"2024-08-04T16:48:01.628Z","title":"The D-link router DIR-885L-MFC 1.15b02, v1.21b05 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an…","severity":"HIGH","score":7.5,"vendor":null,"product":"D-Link Router DIR-885L-MFC","kev":false,"epss":0.01409,"kevAdded":null,"exploit":false},{"id":"CVE-2020-29322","published":"2021-06-04T19:39:00.000Z","updated":"2024-08-04T16:48:01.702Z","title":"The D-Link router DIR-880L 1.07 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated…","severity":"HIGH","score":7.5,"vendor":null,"product":"D-Link Router DIR-880L","kev":false,"epss":0.01711,"kevAdded":null,"exploit":false}]}