CVE-2024-52426

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Linear Oy Linear linear allows DOM-Based XSS.This issue affects Linear: from n/a through 2.7.11...

XML External Entity (XXE)

hapi fhir is vulnerable to XML External Entity XXE. The vulnerability is due to improper handling of XML input. Specifically, the system fails to properly disable or validate external entities within XML documents, allowing attackers to inject malicious XML that can lead to unauthorized data acce...

PT-2024-35072 · Unknown · Stylish Internal Links

Name of the Vulnerable Software and Affected Versions: Stylish Internal Links versions n/a through 1.9 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, allowing DOM-Based XSS. This means that an attacker coul...

WordPress plugin ra_qrcode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

VaeMendis Ubooquity 跨站脚本漏洞

VaeMendis Ubooquity is a free, lightweight and easy-to-use home server from VaeMendis. VaeMendis Ubooquity suffers from a cross-site scripting vulnerability that stems from an improper neutralization of input during web page generation, resulting in a cross-site scripting vulnerability...

ITG Computer vSRM Supplier Relationship Management System 跨站脚本漏洞

ITG Computer vSRM Supplier Relationship Management System is a supplier relationship management system from ITG Computer. A cross-site scripting vulnerability exists in ITG Computer vSRM Supplier Relationship Management System versions prior to 28.08.2024, which stems from improper input...

CVE-2024-9477

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AirTies Air4443 Firmware allows Cross-Site Scripting XSS. This issue affects Air4443 Firmware: through 14102024. NOTE: The vendor was contacted and it was learned that the product classified...

Fortinet FortiManager和Fortinet FortiAnalyzer 操作系统命令注入漏洞

Fortinet FortiManager and Fortinet FortiAnalyzer are both products of Fortinet, a centralized network security management platform. The platform supports centralized management of any number of Fortinet devices, and can be grouped into different management domains ADOM to further simplify the...

CVE-2024-52358

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Cyberchimps Responsive Addons for Elementor allows DOM-Based XSS.This issue affects Responsive Addons for Elementor: from n/a through 1.5.4...

WordPress plugin L Squared Hub WP SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin L...

CVE-2024-51576

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPZA AMP Img Shortcode allows Stored XSS.This issue affects AMP Img Shortcode: from n/a through 1.0.1...

CVE-2024-51588

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Themehat Super Addons for Elementor allows DOM-Based XSS.This issue affects Super Addons for Elementor: from n/a through 1.0...

CVE-2024-51589

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in wpcirqle Bigmart Elements allows DOM-Based XSS.This issue affects Bigmart Elements: from n/a through 1.0.3...

PT-2024-34863 · Perception System · Perception System Ajax Content Filter

Name of the Vulnerable Software and Affected Versions: Perception System Ajax Content Filter versions 1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks...

PT-2024-34910 · Woocommerce · Friendstore For Woocommerce

Name of the Vulnerable Software and Affected Versions: FriendStore for WooCommerce versions 1.4.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks...

PT-2024-34852 · James Bruner · Wp Mmenu Lite

Name of the Vulnerable Software and Affected Versions: James Bruner WP MMenu Lite versions 1.0.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: Fo...

WordPress plugin Header Footer Composer for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

WordPress plugin Display Terms Shortcode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

WordPress plugin UW Freelancer 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-16453 · Unknown · Wojciech Borowicz Conversion Helper

Name of the Vulnerable Software and Affected Versions: Wojciech Borowicz Conversion Helper versions n/a through 1.12 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS...