Lucene search
+L

14579 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/10 12:00 a.m.•2 views

CVE-2024-43721: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the victim's browser session. By manipulating a DOM element through a crafted URL or user inpu...

5.4CVSS6.3AI score0.00641EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/10 12:00 a.m.•3 views

CVE-2024-43712: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could allow an attacker to execute arbitrary code in the context of the victim's browser. This issue occurs when data from a user-controllable source is improperly sanitize...

5.4CVSS6.6AI score0.00641EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/10 12:00 a.m.•2 views

CVE-2024-52822: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the victim's browser session. By manipulating a DOM element through a crafted URL or user inpu...

5.4CVSS6.3AI score0.00901EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/10 12:00 a.m.•2 views

CVE-2024-52837: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the victim's browser session. By manipulating a DOM element through a crafted URL or user inpu...

5.4CVSS6.3AI score0.00901EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/10 12:00 a.m.•2 views

CVE-2024-52860: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the victim's browser session. By manipulating a DOM element through a crafted URL or user inpu...

5.4CVSS6.4AI score0.00757EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/10 12:00 a.m.•2 views

CVE-2024-52840: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the victim's browser session. By manipulating a DOM element through a crafted URL or user inpu...

5.4CVSS6.3AI score0.00901EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/10 12:00 a.m.•11 views

PT-2024-9733 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.21 and earlier Description: The issue is related to a DOM-based Cross-Site Scripting XSS vulnerability in Adobe Experience Manager. This vulnerability could be exploited by an attacker to execute arbitrar...

5.5CVSS6.2AI score0.00901EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/10 12:00 a.m.•2 views

CVE-2024-43738: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could allow an attacker to execute arbitrary code in the context of the victim's browser. This issue occurs when data from a malicious source is processed by a web...

5.4CVSS6.5AI score0.00901EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/10 12:00 a.m.•9 views

PT-2024-9516 · Adobe · Connect

Name of the Vulnerable Software and Affected Versions: Adobe Connect versions 12.6, 11.4.7 and earlier Description: The issue is related to a DOM-based Cross-Site Scripting XSS vulnerability. It could be exploited by an attacker to execute arbitrary code in the context of the victim's browser...

8.1CVSS6.4AI score0.00906EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2024/12/10 12:00 a.m.•5 views

PT-2025-11704

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.21 and earlier Description The issue is a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited to execute arbitrary code in the context of the victim's browser session. By manipulating...

5.5CVSS0.00381EPSS
SaveExploits0References7
NVD
NVD
•added 2024/12/09 1:15 p.m.•36 views

CVE-2024-54230

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Masud Hasan Unlock Addons for Elementor unlock-addons-for-elementor allows DOM-Based XSS.This issue affects Unlock Addons for Elementor: from n/a through = 2.2.4...

6.5CVSS0.00312EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/09 1:15 p.m.•36 views

CVE-2024-54228

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Weboccult Technologies Pvt Ltd Wot Elementor Widgets wot-elementor-widgets allows DOM-Based XSS.This issue affects Wot Elementor Widgets: from n/a through = 1.0.1...

6.5CVSS0.00312EPSS
SaveExploits0References1
OSV
OSV
•added 2024/12/09 1:15 p.m.•13 views

CVE-2024-54224

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuomodoSoft ElementsReady Addons for Elementor allows DOM-Based XSS.This issue affects ElementsReady Addons for Elementor: from n/a through 6.4.7...

5.4CVSS7.3AI score0.00325EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/09 1:15 p.m.•39 views

CVE-2024-54224

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in quomodosoft ElementsReady Addons for Elementor element-ready-lite allows DOM-Based XSS.This issue affects ElementsReady Addons for Elementor: from n/a through = 6.4.7...

6.5CVSS0.00325EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/09 11:32 a.m.•43 views

CVE-2024-54224 WordPress ElementsReady Addons for Elementor plugin <= 6.4.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in quomodosoft ElementsReady Addons for Elementor element-ready-lite allows DOM-Based XSS.This issue affects ElementsReady Addons for Elementor: from n/a through = 6.4.7...

6.5CVSS0.00325EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/09 11:32 a.m.•74 views

CVE-2024-54224

CVE-2024-54224 affects WordPress ElementsReady Addons for Elementor (

6.5CVSS7.2AI score0.00325EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/12/09 11:32 a.m.•13 views

CVE-2024-54224 WordPress ElementsReady Addons for Elementor plugin <= 6.4.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuomodoSoft ElementsReady Addons for Elementor allows DOM-Based XSS.This issue affects ElementsReady Addons for Elementor: from n/a through 6.4.7...

6.5CVSS7AI score0.00325EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/09 11:32 a.m.•61 views

CVE-2024-54228

The CVE CVE-2024-54228 affects WebOccult Technologies Pvt Ltd Wot Elementor Widgets (WordPress plugin). It is a DOM-based Cross-Site Scripting (XSS) vulnerability introduced by improper input neutralization during web page generation, affecting versions from n/a up to 1.0.1. Public sources in the...

6.5CVSS7.2AI score0.00312EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/09 11:32 a.m.•38 views

CVE-2024-54230 WordPress Unlock Addons for Elementor plugin <= 2.2.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Masud Hasan Unlock Addons for Elementor unlock-addons-for-elementor allows DOM-Based XSS.This issue affects Unlock Addons for Elementor: from n/a through = 2.2.4...

6.5CVSS0.00312EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/09 11:32 a.m.•68 views

CVE-2024-54230

CVE-2024-54230 describes a DOM-based cross-site scripting (XSS) vulnerability in the WordPress plugin Unlock Addons for Elementor (WPRealizer Unlock Addons for Elementor). The issue arises from improper neutralization of input during web page generation. The CVE text indicates the flaw affects Un...

6.5CVSS7.2AI score0.00312EPSS
SaveExploits0References1
Rows per page
Query Builder