PT-2024-34923 · WordPress · Trendy Restaurant Menu

Name of the Vulnerable Software and Affected Versions: Trendy Restaurant Menu versions 1.0.0 and earlier Description: The issue affects the Trendy Restaurant Menu plugin for WordPress, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This can lead to...

PT-2024-35025

Name of the Vulnerable Software and Affected Versions Topbar ID for Elementor versions 1.0.1 and earlier Description The issue affects the Topbar ID for Elementor plugin, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This is a high-severity XSS...

PT-2024-35012

Name of the Vulnerable Software and Affected Versions Be Shortcodes versions 1.0.0 and earlier Description The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows DOM-Based XSS. This is a high-severity vulnerabilit...

PT-2024-34965

Name of the Vulnerable Software and Affected Versions Pull This versions 1.1 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows DOM-Based XSS. This is a high-severity XSS vulnerability. Users are urged to update to the latest...

PT-2024-35071

Name of the Vulnerable Software and Affected Versions NicheAddons Charity Addon for Elementor versions 1.3.2 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing DOM-Based XSS. This means that an...

CVE-2024-51935: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sam Perrow Fast Video and Image Display fast-video-and-image-display allows DOM-Based XSS.This issue affects Fast Video and Image Display: from n/a through = 2.5.2...

CVE-2024-51826: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jandal Bitcoin Payments bitcoin-payments allows DOM-Based XSS.This issue affects Bitcoin Payments: from n/a through = 1.4.2...

CVE-2024-51799: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vadim Bogaiskov Bg Patriarchia BU bg-patriarchia-bu allows DOM-Based XSS.This issue affects Bg Patriarchia BU: from n/a through = 2.2.3...

CVE-2024-51931: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shazahanul Islam Shohag AzonBox azonbox allows DOM-Based XSS.This issue affects AzonBox: from n/a through = 1.1.2...

CVE-2024-51916: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative Brahma Multifox Plus multifox-plus allows DOM-Based XSS.This issue affects Multifox Plus: from n/a through = 1.1.6...

PT-2024-34955

Name of the Vulnerable Software and Affected Versions Beacon For Help Scout versions 1.3.0 and earlier Description The issue affects the Beacon For Help Scout plugin, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This can lead to cross-site scripting...

PT-2024-35070

Name of the Vulnerable Software and Affected Versions Information Analytics IA Map Analytics Basic versions from n/a through 20170413 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. Th...

PT-2024-35060

Name of the Vulnerable Software and Affected Versions Jakir Hasan Blocks Post Grid versions 1.0.3 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could potentially inject...

PT-2024-35044

Name of the Vulnerable Software and Affected Versions Ketan Patel Featured product by category name versions n/a through 1.1 Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could potential...

PT-2024-34983

Name of the Vulnerable Software and Affected Versions Hola Free Video Player versions 1.3.9 and earlier Description The issue affects Hola Free Video Player, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This is a high-severity XSS vulnerability. Users...

PT-2024-34325

Name of the Vulnerable Software and Affected Versions: Themedy Toolbox versions 1.0.0 through 1.0.16 Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This can lead to cross-site scripting attacks. Recommendations: Fo...

PT-2024-34326

Name of the Vulnerable Software and Affected Versions: Abdullah Nahian Awesome Progress Bar versions 1.0.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for DOM-Based XSS attacks...

CVE-2024-51873: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Masashi Takizawa Multi-day Booking Calendar multi-day-booking-calendar allows DOM-Based XSS.This issue affects Multi-day Booking Calendar: from n/a through = 1.0.1...

PT-2024-34928

Name of the Vulnerable Software and Affected Versions Bread & Butter versions n/a through 7.4.857 Description The issue is related to improper neutralization of input during web page generation, which allows DOM-Based XSS. This means that an attacker could potentially inject malicious scripts int...

PT-2024-35066

Name of the Vulnerable Software and Affected Versions Cookie Nonsense for YT versions 1.2.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for DOM-Based XSS. Recommendations For versions...