WordPress Colibri Page Builder plugin <= 1.0.286 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library

Authenticated Contributor+ Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library vulnerability discovered by Webbernaut in WordPress Plugin Colibri Page Builder versions = 1.0.286...

CVE-2024-53741

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Garrett Grimm Simple Popup simple-popup-plugin allows DOM-Based XSS.This issue affects Simple Popup: from n/a through = 4.6...

CVE-2024-53709

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nasir Uddin Generic Elements generic-elements-for-elementor allows DOM-Based XSS.This issue affects Generic Elements: from n/a through = 1.2.5...

CVE-2024-52502

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ImbaSynergy ImbaChat imbachat-widget allows DOM-Based XSS.This issue affects ImbaChat: from n/a through = 3.1.4...

CVE-2024-52486

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SolverWp Elementor Portfolio Builder portfolio-builder-elementor allows DOM-Based XSS.This issue affects Elementor Portfolio Builder: from n/a through = 1.0.0...

CVE-2024-52502 WordPress ImbaChat plugin <= 3.1.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ImbaSynergy ImbaChat imbachat-widget allows DOM-Based XSS.This issue affects ImbaChat: from n/a through = 3.1.4...

CVE-2024-52502

CVE-2024-52502 affects WordPress plugin ImbaChat (Imbasynergy) up to version 3.1.4. It is described as an improper neutralization of input during web page generation, resulting in a DOM-based XSS vulnerability. The CVSS data provided indicates a base score of 6.5 (Medium) with Network attack vect...

CVE-2024-53709

CVE-2024-53709 affects WordPress plugin Generic Elements (

CVE-2024-53709 WordPress Generic Elements plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bdevs Generic Elements allows DOM-Based XSS.This issue affects Generic Elements: from n/a through 1.2.3...

CVE-2024-53741

CVE-2024-53741 concerns the WordPress plugin Simple Popup (versions

CVE-2024-53741: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Garrett Grimm Simple Popup simple-popup-plugin allows DOM-Based XSS.This issue affects Simple Popup: from n/a through = 4.6...

CVE-2024-53709: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nasir Uddin Generic Elements generic-elements-for-elementor allows DOM-Based XSS.This issue affects Generic Elements: from n/a through = 1.2.5...

CVE-2024-52486: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SolverWp Elementor Portfolio Builder portfolio-builder-elementor allows DOM-Based XSS.This issue affects Elementor Portfolio Builder: from n/a through = 1.0.0...

PT-2024-35850

Name of the Vulnerable Software and Affected Versions Garrett Grimm Simple Popup versions prior to 4.6 Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows DOM-Based XSS. Recommendations For versions...

CVE-2024-52502: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ImbaSynergy ImbaChat imbachat-widget allows DOM-Based XSS.This issue affects ImbaChat: from n/a through = 3.1.4...

PT-2024-35815

Name of the Vulnerable Software and Affected Versions bdevs Generic Elements versions 1.2.3 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows DOM-Based XSS. This is a type of Cross-site Scripting vulnerability. Recommendation...

CVE-2024-53774

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jakub Glos Sparkle Elementor Kit sparkle-elementor-kit allows DOM-Based XSS.This issue affects Sparkle Elementor Kit: from n/a through = 2.0.9...

CVE-2024-53771

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sergiomico SimpleSchema simpleschema-free allows DOM-Based XSS.This issue affects SimpleSchema: from n/a through = 1.7.6.9...

CVE-2024-53767

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pixobe Pixobe Cartography pixobe-cartography allows DOM-Based XSS.This issue affects Pixobe Cartography: from n/a through = 1.0.1...

CVE-2024-53764

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SoftHopper Softtemplates For Elementor softtemplates-for-elementor allows DOM-Based XSS.This issue affects Softtemplates For Elementor: from n/a through = 1.0.8...