PT-2024-34981 · Elementor · Dynamic Post Grid Elementor Addon

Name of the Vulnerable Software and Affected Versions: Dynamic Post Grid Elementor Addon versions 1.0.0 through 1.0.6 Description: The issue affects the Dynamic Post Grid Elementor Addon, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This is a...

PT-2024-34325

Name of the Vulnerable Software and Affected Versions: Themedy Toolbox versions 1.0.0 through 1.0.16 Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This can lead to cross-site scripting attacks. Recommendations: Fo...

PT-2024-35045

Name of the Vulnerable Software and Affected Versions Lilaea Media IntelliWidget Elements versions n/a through 2.2.7 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing DOM-Based XSS. This means that an...

PT-2024-34982

Name of the Vulnerable Software and Affected Versions Faltu Testimonial Rotator versions 1.0.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for DOM-Based XSS attacks. Recommendations Fo...

PT-2024-34968

Name of the Vulnerable Software and Affected Versions Wd-image-magnifier-xoss versions 1.0 and earlier Description The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting'. This allows for DOM-Based XSS attacks. Recommendations F...

PT-2024-35005

Name of the Vulnerable Software and Affected Versions MDC YouTube Downloader versions 3.0.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This is a DOM-Based XSS vulnerability, which allows attacker...

PT-2024-34953

Name of the Vulnerable Software and Affected Versions James Turner Bitcoin Payments versions 1.4.2 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing DOM-Based XSS. This means that an attacker...

PT-2024-35044

Name of the Vulnerable Software and Affected Versions Ketan Patel Featured product by category name versions n/a through 1.1 Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could potential...

PT-2024-35007

Name of the Vulnerable Software and Affected Versions SV Forms versions n/a through 2.0.05 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing DOM-Based XSS. This enables potential attackers to inject...

PT-2024-35070

Name of the Vulnerable Software and Affected Versions Information Analytics IA Map Analytics Basic versions from n/a through 20170413 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. Th...

PT-2024-34297

Name of the Vulnerable Software and Affected Versions: Ancient World Linked Data versions 0.2.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing DOM-Based XSS. This means that the software do...

PT-2024-35048

Name of the Vulnerable Software and Affected Versions Multifox Plus versions 1.1.6 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing DOM-Based XSS. This enables potential attackers to execute...

PT-2024-34969 · Elementor · File Select Control For Elementor

Name of the Vulnerable Software and Affected Versions: File Select Control For Elementor versions 1.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could potentially inject...

PT-2024-35025

Name of the Vulnerable Software and Affected Versions Topbar ID for Elementor versions 1.0.1 and earlier Description The issue affects the Topbar ID for Elementor plugin, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This is a high-severity XSS...

PT-2024-34940

Name of the Vulnerable Software and Affected Versions Anant Addons for Elementor versions 1.0.0 through 1.0.5 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for DOM-Based XSS, which can be exploited ...

PT-2024-34955

Name of the Vulnerable Software and Affected Versions Beacon For Help Scout versions 1.3.0 and earlier Description The issue affects the Beacon For Help Scout plugin, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This can lead to cross-site scripting...

PT-2024-35071

Name of the Vulnerable Software and Affected Versions NicheAddons Charity Addon for Elementor versions 1.3.2 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing DOM-Based XSS. This means that an...

PT-2024-34326

Name of the Vulnerable Software and Affected Versions: Abdullah Nahian Awesome Progress Bar versions 1.0.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for DOM-Based XSS attacks...

CVE-2024-51814: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 野人 活动链接推广插件 yr-activity-link allows DOM-Based XSS.This issue affects 活动链接推广插件: from n/a through = 1.2.0...

CVE-2024-51931: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shazahanul Islam Shohag AzonBox azonbox allows DOM-Based XSS.This issue affects AzonBox: from n/a through = 1.1.2...