Lucene search
+L

6563 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/09 12:00 a.m.•9 views

CVE-2024-51589: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpcirqle Bigmart Elements bigmart-elements allows DOM-Based XSS.This issue affects Bigmart Elements: from n/a through = 1.0.3...

6.5CVSS5.8AI score0.00235EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/09 12:00 a.m.•8 views

PT-2024-34735

Name of the Vulnerable Software and Affected Versions bnayawpguy Meta Store Elements versions 1.0.0 through 1.0.9 Description The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS or DOM-Based XSS, in bnayawpguy Meta Store...

6.5CVSS5.8AI score0.0024EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2024/11/09 12:00 a.m.•24 views

PT-2024-34745 · Unknown · Nmr Strava Activities

Name of the Vulnerable Software and Affected Versions: NMR Strava activities versions 1.0.0 through 1.0.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. Specifically, it is a DOM-Based XSS vulnerability. Th...

6.5CVSS6AI score0.00255EPSS
SaveExploits0References6
NVD
NVD
•added 2024/11/07 10:15 p.m.•55 views

CVE-2024-49524

Adobe Experience Manager versions 6.5.20 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the victim's browser session. By manipulating a DOM element through a crafted URL or user inpu...

5.4CVSS0.00394EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/11/07 10:15 p.m.•23 views

CVE-2024-49524

Adobe Experience Manager versions 6.5.20 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the victim's browser session. By manipulating a DOM element through a crafted URL or user inpu...

5.4CVSS6AI score0.00394EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/07 9:35 p.m.•31 views

CVE-2024-49524 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the victim's browser session. By manipulating a DOM element through a crafted URL or user inpu...

5.4CVSS0.00394EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/07 9:35 p.m.•23 views

CVE-2024-49524 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the victim's browser session. By manipulating a DOM element through a crafted URL or user inpu...

5.4CVSS6AI score0.00394EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/07 9:35 p.m.•87 views

CVE-2024-49524

CVE-2024-49524 affects Adobe Experience Manager versions 6.5.20 and earlier, with a DOM-based Cross-Site Scripting (XSS) vulnerability. By manipulating a DOM element through a crafted URL or user input, an attacker can inject scripts that execute in the victim’s browser context. Exploitation typi...

5.4CVSS5.2AI score0.00394EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/07 12:00 a.m.•2 views

CVE-2024-49524: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager versions 6.5.20 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the victim's browser session. By manipulating a DOM element through a crafted URL or user inpu...

5.4CVSS6.4AI score0.00394EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/29 11:01 a.m.•44 views

CVE-2024-10266 Premium Addons for Elementor <= 4.10.60 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Video Box Widget

The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video Box widget in all versions up to, and including, 4.10.60 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00296EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/10/29 5:12 a.m.•21 views

WordPress Premium Addons for Elementor plugin <= 4.10.60 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Video Box Widget vulnerability

Authenticated Contributor+ DOM-Based Stored Cross-Site Scripting via Video Box Widget vulnerability discovered by zer0gh0st in WordPress Plugin Premium Addons for Elementor versions = 4.10.60...

6.4CVSS5.8AI score0.00296EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/29 12:00 a.m.•4 views

CVE-2024-50418: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Time Slot Booking Time Slot timeslot allows DOM-Based XSS.This issue affects Time Slot: from n/a through = 1.3.6...

6.5CVSS5.8AI score0.00268EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/29 12:00 a.m.•6 views

CVE-2024-49659: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Coub Coub coub allows DOM-Based XSS.This issue affects Coub: from n/a through = 1.4...

6.5CVSS5.8AI score0.0027EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/28 6:15 p.m.•28 views

CVE-2024-50469

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brightvesseldev Textboxes textboxes allows DOM-Based XSS.This issue affects Textboxes: from n/a through = 0.1.3.1...

6.5CVSS0.00269EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/28 5:41 p.m.•57 views

CVE-2024-50469

CVE-2024-50469 is a DOM-based XSS vulnerability in the WordPress Textboxes plugin (versions up to 0.1.3.1). The issue is described as Improper Neutralization of Input During Web Page Generation (XSS) affecting Textboxes; CVSS 3.1 base score 6.5 (Network, Low Privileges, User Interaction required,...

6.5CVSS5.9AI score0.00269EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/28 12:00 a.m.•15 views

PT-2024-34245 · Unknown · Team Bright Vessel Textboxes

Name of the Vulnerable Software and Affected Versions: Team Bright Vessel Textboxes versions 0.1.3.1 and earlier Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This is a DOM-Based XSS vulnerability...

6.5CVSS5.8AI score0.00269EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/28 12:00 a.m.•5 views

CVE-2024-50468: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in faceleg Raptor Editor wp-raptor allows DOM-Based XSS.This issue affects Raptor Editor: from n/a through = 1.0.20...

6.5CVSS5.8AI score0.00269EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/28 12:00 a.m.•6 views

CVE-2024-50429: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BlockArt Magazine Blocks magazine-blocks allows DOM-Based XSS.This issue affects Magazine Blocks: from n/a through = 1.3.15...

6.5CVSS5.8AI score0.00275EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/28 12:00 a.m.•7 views

CVE-2024-50469: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brightvesseldev Textboxes textboxes allows DOM-Based XSS.This issue affects Textboxes: from n/a through = 0.1.3.1...

6.5CVSS5.8AI score0.00269EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/28 12:00 a.m.•4 views

CVE-2024-50471: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in checklistcom Trip Plan tripplan allows DOM-Based XSS.This issue affects Trip Plan: from n/a through = 1.0.10...

6.5CVSS5.8AI score0.0027EPSS
SaveExploits0References1
Rows per page
Query Builder