PT-2024-35061 · Unknown · Phil Spectrum Icon Widget

Name of the Vulnerable Software and Affected Versions: Phil Spectrum Icon Widget versions 1.1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing DOM-Based XSS. This enables potential attacker...

PT-2024-34981 · Elementor · Dynamic Post Grid Elementor Addon

Name of the Vulnerable Software and Affected Versions: Dynamic Post Grid Elementor Addon versions 1.0.0 through 1.0.6 Description: The issue affects the Dynamic Post Grid Elementor Addon, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This is a...

PT-2024-35011 · Unknown · Bebetter Social Icons

Name of the Vulnerable Software and Affected Versions: BeBetter Social Icons versions through 2.7 Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This can lead to the execution of malicious scripts in the context of...

PT-2024-34923 · WordPress · Trendy Restaurant Menu

Name of the Vulnerable Software and Affected Versions: Trendy Restaurant Menu versions 1.0.0 and earlier Description: The issue affects the Trendy Restaurant Menu plugin for WordPress, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This can lead to...

PT-2024-34926 · Unknown · Bg Patriarchia Bu

Name of the Vulnerable Software and Affected Versions: Bg Patriarchia BU versions n/a through 2.2.3 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows DOM-Based XSS. Users are urged to update to t...

PT-2024-34320 · Unknown · Rlm Elementor Widgets Pack

Name of the Vulnerable Software and Affected Versions: RLM Elementor Widgets Pack versions 1.3.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This can lead to cross-site scripting attacks...

PT-2024-34951 · WordPress · Advanced Video Player With Analytics

Name of the Vulnerable Software and Affected Versions: Advanced Video Player with Analytics version 1 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting'. This is a DOM-Based XSS vulnerability. It affects the...

PT-2024-34985 · Unknown · Moose Elementor Kit

Name of the Vulnerable Software and Affected Versions: Moose Elementor Kit versions 1.0.0 and earlier Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows DOM-Based XSS. This is a critical security...

PT-2024-34969 · Elementor · File Select Control For Elementor

Name of the Vulnerable Software and Affected Versions: File Select Control For Elementor versions 1.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could potentially inject...

PT-2024-34984 · Unknown · Productineer Redirecter

Name of the Vulnerable Software and Affected Versions: Productineer Redirecter versions n/a through 1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows DOM-Based XSS. This means that an attacker...

PT-2024-34929 · Magnetic Creative · Magnetic Creative Inline Click To Tweet

Name of the Vulnerable Software and Affected Versions: Magnetic Creative Inline Click To Tweet versions n/a through 1.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means th...

PT-2024-34952 · Alert Me! · Alert Me!

Name of the Vulnerable Software and Affected Versions: Alert Me! versions 0.4.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could potentially inject malicious scripts into...

PT-2024-34980 · Unknown · Best Bootstrap Widgets For Elementor

Name of the Vulnerable Software and Affected Versions: Best Bootstrap Widgets for Elementor versions 1.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based Cross-site Scripting XSS attacks. This means an attacke...

CVE-2024-51940

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sohelwpexpert WP Responsive Video my-wp-responsive-video allows DOM-Based XSS.This issue affects WP Responsive Video: from n/a through = 1.0...

CVE-2024-51939

CVE-2024-51939 : A DOM-based XSS in the WordPress plugin Stylish Internal Links (vulnerable: versions up to 1.9). The issue is described as improper neutralization of input during web page generation, enabling cross-site scripting. Public references consistently identify this as a DOM-based XSS a...

CVE-2024-51940 WordPress WP Responsive Video plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in sohelwpexpert WP Responsive Video allows DOM-Based XSS.This issue affects WP Responsive Video: from n/a through 1.0...

CVE-2024-51940

CVE-2024-51940 describes a DOM-based Cross-Site Scripting vulnerability in the WordPress plugin WP Responsive Video . The issue is due to improper neutralization of input during Web Page Generation, affecting plugin versions from n/a through 1.0. The connected documents confirm the plugin is vuln...

CVE-2024-52348

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA Extensions AA Audio Player aa-audio-player allows DOM-Based XSS.This issue affects AA Audio Player: from n/a through = 1.0...

CVE-2024-52348

CVE-2024-52348 is an XSS vulnerability in the WordPress plugin AA Audio Player (“aaextention”), described as DOM-based XSS caused by improper input neutralization during web page generation. Affected versions are listed as n/a through 1.0. Public sources in the Connected documents reiterate the s...

CVE-2024-52349 WordPress Awesome Tool Tip plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Md. Shiddikur Rahman Awesome Tool Tip awesome-tool-tip allows DOM-Based XSS.This issue affects Awesome Tool Tip: from n/a through = 1.0...