cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2009-4169,https://securityvulnerability.io/vulnerability/CVE-2009-4169,,Cross-site scripting (XSS) vulnerability in wp-cumulus.php in the WP-Cumulus Plug-in before 1.22 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.,Wordpress,WP-cumulus,,,0.0019199999514967203,false,,false,false,false,,false,false,2009-12-02T18:30:00.000Z,0
CVE-2009-4170,https://securityvulnerability.io/vulnerability/CVE-2009-4170,,"WP-Cumulus Plug-in 1.20 for WordPress, and possibly other versions, allows remote attackers to obtain sensitive information via a crafted request to wp-cumulus.php, probably without parameters, which reveals the installation path in an error message.",Wordpress,WP-cumulus,,,0.005249999929219484,false,,false,false,false,,false,false,2009-12-02T18:00:00.000Z,0
CVE-2009-4168,https://securityvulnerability.io/vulnerability/CVE-2009-4168,,"Cross-site scripting (XSS) vulnerability in Roy Tanck tagcloud.swf, as used in the WP-Cumulus plugin before 1.23 for WordPress and the Joomulus module 2.0 and earlier for Joomla!, allows remote attackers to inject arbitrary web script or HTML via the tagcloud parameter in a tags action. Cross-site scripting (XSS) vulnerability in tagcloud.swf in the WP-Cumulus Plug-in before 1.23 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tagcloud parameter.",Wordpress,WP-cumulus,,,0.49682000279426575,false,,false,false,false,,false,false,2009-12-02T18:00:00.000Z,0