CVE-2024-51855 WordPress Redirecter plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Productineer Redirecter shortcode-for-redirection allows DOM-Based XSS.This issue affects Redirecter: from n/a through = 1.0...

CVE-2024-51856

CVE-2024-51856 is an XSS vulnerability in the WP Moose Elementor Kit (WordPress plugin) where improper input handling during web page generation leads to a DOM-based cross-site scripting issue. Public sources concur this affects Moose Elementor Kit up to version 1.0.0 (and earlier), with exploita...

CVE-2024-51857 WordPress Olympus Shortcodes plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DannyCooper Olympus Shortcodes olympus-shortcodes allows DOM-Based XSS.This issue affects Olympus Shortcodes: from n/a through = 1.0.4...

CVE-2024-51873 WordPress Multi-day Booking Calendar plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in matorel Multi-day Booking Calendar allows DOM-Based XSS.This issue affects Multi-day Booking Calendar: from n/a through 1.0.1...

CVE-2024-51873

CVE-2024-51873 is a DOM-based XSS vulnerability in the matorel Multi-day Booking Calendar WordPress plugin, affecting versions up to 1.0.1. The issue arises from improper input handling during web page generation, enabling cross-site scripting. Publicly disclosed details from multiple sources con...

CVE-2024-51875

CVE-2024-51875 is a DOM-based Cross-Site Scripting vulnerability in the WordPress plugin “MDC YouTube Downloader” (MDC YouTube Downloader) affecting versions up to 3.0.0. The issue stems from improper input neutralization during web page generation, enabling DOM-based XSS. Public records describe...

CVE-2024-51877 WordPress SV Forms plugin <= 2.0.05 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in straightvisions GmbH SV Forms allows DOM-Based XSS.This issue affects SV Forms: from n/a through 2.0.05...

CVE-2024-51878

CVE-2024-51878 affects AchillesTheme-shortcodes (WordPress plugin). Public details describe an improper input neutralization during web page generation leading to DOM-based XSS in versions up to 0.1. No patch information is provided in the connected documents; remediation status is not specified....

CVE-2024-51878 WordPress AchillesTheme-shortcodes plugin <= 0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in strailejoey AchillesTheme-shortcodes achilles-shortcodes allows DOM-Based XSS.This issue affects AchillesTheme-shortcodes: from n/a through = 0.1...

CVE-2024-51880 WordPress BeBetter Social Icons plugin <= 2.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BeBetter Hotels BeBetter Social Icons allows DOM-Based XSS.This issue affects BeBetter Social Icons: from n/a through 2.7...

CVE-2024-51881 WordPress Be Shortcodes plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Beautimour Be Shortcodes allows DOM-Based XSS.This issue affects Be Shortcodes: from n/a through 1.0.0...

CVE-2024-51893

CVE-2024-51893 describes a DOM-based XSS in the WordPress plugin Postify: Post Layout For Elementor (ThemeAtelier) affecting versions from 1.0.1 and earlier. The root cause is improper input neutralization during web page generation, enabling injection of script payloads via the plugin’s output. ...

CVE-2024-51894

CVE-2024-51894 is a DOM-based Cross-Site Scripting vulnerability in the WordPress plugin “Topbar ID for Elementor.” The issue affects versions up to 1.0.1 and arises from improper input neutralization during page generation, enabling user-triggered script execution within the context of the affec...

CVE-2024-51906

CVE-2024-51906 concerns a DOM-based XSS in RSV 360 View (WordPress plugin). The RSV 360 View vulnerability is caused by improper input neutralization during web page generation, enabling cross-site scripting. According to PT Security details, affected RSV 360 View versions include n/a through 1.0...

CVE-2024-51906 WordPress RSV 360 View plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ravi Kumar Vanukuru RSV 360 View rsv-360-view allows DOM-Based XSS.This issue affects RSV 360 View: from n/a through = 1.0...

CVE-2024-51908 WordPress Adventure Bucket List plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gonzalo Geraldo Adventure Bucket List allows DOM-Based XSS.This issue affects Adventure Bucket List: from n/a through 1.0.9...

CVE-2024-51908

CVE-2024-51908 is a DOM-based XSS in the WordPress plugin Adventure Bucket List (WordPress plugin family). The vulnerability arises from improper input neutralization during page generation, enabling DOM-based cross-site scripting. Affected versions are reported as “from n/a through 1.0.9” for Ad...

CVE-2024-51911

CVE-2024-51911 is a DOM-based Cross-Site Scripting vulnerability in the WordPress plugin “Featured product by category name” (author: Ketan Patel) affecting version up to 1.1. The vulnerability arises from improper input neutralization during web page generation, enabling DOM-based XSS. The CVE e...

CVE-2024-51911 WordPress Featured product by category name plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ketan Patel Featured product by category name featured-product-by-category-name allows DOM-Based XSS.This issue affects Featured product by category name: from n/a through = 1.1...

CVE-2024-51910

CVE-2024-51910 is a DOM-based XSS in Mauro Cordioli’s Assist24 Help Desk WordPress plugin (vulnerable through 20150401.2). Root cause: improper input neutralization during web page generation. Affected software: Assist24 Help Desk (WordPress plugin). Impact: Cross-site scripting via crafted input...