Lucene search
+L

48 matches found

osv_cve
osv_cve
•added 2024/12/13 3:15 p.m.•24 views

CVE-2024-54315

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NicheAddons Events Addon for Elementor allows DOM-Based XSS.This issue affects Events Addon for Elementor: from n/a through 2.2.2...

5.4CVSS8.4AI score0.00409EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/13 3:15 p.m.•65 views

CVE-2024-54315

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicheaddons Events Addon for Elementor events-addon-for-elementor allows DOM-Based XSS.This issue affects Events Addon for Elementor: from n/a through = 2.2.2...

6.5CVSS0.00409EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/13 2:25 p.m.•54 views

CVE-2024-54315 WordPress Events Addon for Elementor plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicheaddons Events Addon for Elementor events-addon-for-elementor allows DOM-Based XSS.This issue affects Events Addon for Elementor: from n/a through = 2.2.2...

6.5CVSS0.00409EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/13 2:25 p.m.•72 views

CVE-2024-54315

CVE-2024-54315: DOM-based stored XSS in NicheAddons Events Addon for Elementor (Events Addon for Elementor) affects

6.5CVSS8.4AI score0.00409EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/12/13 2:25 p.m.•20 views

CVE-2024-54315 WordPress Events Addon for Elementor plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NicheAddons Events Addon for Elementor allows DOM-Based XSS.This issue affects Events Addon for Elementor: from n/a through 2.2.2...

6.5CVSS8.4AI score0.00409EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•12 views

CVE-2024-54315: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicheaddons Events Addon for Elementor events-addon-for-elementor allows DOM-Based XSS.This issue affects Events Addon for Elementor: from n/a through = 2.2.2...

6.5CVSS8.5AI score0.00409EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/13 12:00 a.m.•24 views

PT-2024-36197 · Elementor · Nicheaddons Events Addon For Elementor

Name of the Vulnerable Software and Affected Versions: NicheAddons Events Addon for Elementor versions through 2.2.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing DOM-Based XSS. Recommendations: For...

6.5CVSS8.4AI score0.00409EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/12/13 12:00 a.m.•23 views

WordPress Plugin Events Addon for Elementor: Cross-site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS8AI score0.00409EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/12/11 8:27 p.m.•22 views

WordPress Events Addon for Elementor plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Events Addon for Elementor versions = 2.2.2...

6.5CVSS8.4AI score0.00409EPSS
SaveExploits0Affected Software1
osv_cve
osv_cve
•added 2024/10/17 8:15 p.m.•19 views

CVE-2024-49264

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in NicheAddons Events Addon for Elementor allows Stored XSS.This issue affects Events Addon for Elementor: from n/a through 2.2.0...

5.4CVSS5.8AI score0.0026EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/17 8:15 p.m.•39 views

CVE-2024-49264

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicheaddons Events Addon for Elementor events-addon-for-elementor allows Stored XSS.This issue affects Events Addon for Elementor: from n/a through = 2.2.0...

6.5CVSS0.0026EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/17 7:26 p.m.•73 views

CVE-2024-49264

CVE-2024-49264 describes a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Event Addon for Elementor (Events Addon for Elementor) that allowed stored XSS vulnerabilities in versions up to 2.2.0. The issue stems from improper neutralization of input during web page generation. Pub...

6.5CVSS5.8AI score0.0026EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/17 12:00 a.m.•6 views

CVE-2024-49264: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicheaddons Events Addon for Elementor events-addon-for-elementor allows Stored XSS.This issue affects Events Addon for Elementor: from n/a through = 2.2.0...

6.5CVSS5.8AI score0.0026EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/10/17 12:00 a.m.•20 views

WordPress Plugin Events Addon for Elementor: Cross-site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS5.5AI score0.0026EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/10/17 12:00 a.m.•11 views

PT-2024-33403

Name of the Vulnerable Software and Affected Versions NicheAddons Events Addon for Elementor versions through 2.2.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...

6.5CVSS5.8AI score0.0026EPSS
SaveExploits0References7
Patchstack
Patchstack
•added 2024/10/14 12:52 p.m.•18 views

WordPress Events Addon for Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Events Addon for Elementor versions = 2.2.0...

6.5CVSS5.8AI score0.0026EPSS
SaveExploits0Affected Software1
osv_cve
osv_cve
•added 2024/06/11 9:15 p.m.•25 views

CVE-2024-4669

The Events Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Basic Slider, Upcoming Events, and Schedule widgets in all versions up to, and including, 2.1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This mak...

5.4CVSS6AI score0.00329EPSS
SaveExploits0References5
Patchstack
Patchstack
•added 2024/06/11 8:49 a.m.•24 views

WordPress Events Addon for Elementor plugin <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Multiple Widgets vulnerability discovered by stealthcopter in WordPress Plugin Events Addon for Elementor versions = 2.1.4...

6.4CVSS5.8AI score0.00329EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/11 12:00 a.m.•8 views

CVE-2024-4669: Improper Neutralization of Input During Web Page Generation

The Events Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Basic Slider, Upcoming Events, and Schedule widgets in all versions up to, and including, 2.1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This mak...

6.4CVSS6AI score0.00329EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/11 12:00 a.m.•14 views

PT-2024-32117

Name of the Vulnerable Software and Affected Versions Events Addon for Elementor plugin for WordPress versions up to, and including, 2.1.4 Description The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the Basic Slider, Upcoming Events, and...

6.4CVSS5.7AI score0.00329EPSS
SaveExploits0References7
Rows per page
Query Builder