Lucene search
+L

2171 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•4 views

CVE-2024-51858: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginOps Social Locker social-locker-content allows Stored XSS.This issue affects Social Locker: from n/a through = 1.1...

6.5CVSS5.8AI score0.00431EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/19 12:00 a.m.•4 views

PT-2024-34932

Name of the Vulnerable Software and Affected Versions Awesome Fitness Testimonials versions 1.0.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations Fo...

6.5CVSS5.7AI score0.00377EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•4 views

CVE-2024-51872: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in luzuk Themes Luzuk Testimonials luzuk-testimonials allows Stored XSS.This issue affects Luzuk Testimonials: from n/a through = 0.0.1...

6.5CVSS5.8AI score0.00315EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•4 views

CVE-2024-51936: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eSparkBiz ESB Testimonials esb-testimonials allows Stored XSS.This issue affects ESB Testimonials: from n/a through = 1.0.0...

6.5CVSS5.8AI score0.00241EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•5 views

CVE-2024-51923: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Websand Websand Subscription Form websand-subscription-form allows Stored XSS.This issue affects Websand Subscription Form: from n/a through = 1.0.3...

6.5CVSS5.8AI score0.00255EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•3 views

CVE-2024-51891: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SalesWizard.pl Official SalesWizard CRM Plugin official-saleswizard-crm allows Stored XSS.This issue affects Official SalesWizard CRM Plugin: from n/a through = 1.0.3...

6.5CVSS5.8AI score0.00315EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•6 views

CVE-2024-51814: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 野人 活动链接推广插件 yr-activity-link allows DOM-Based XSS.This issue affects 活动链接推广插件: from n/a through = 1.2.0...

6.5CVSS5.8AI score0.004EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•5 views

CVE-2024-51901: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wojciechborowicz Smooth Maps colour-smooth-maps allows Stored XSS.This issue affects Smooth Maps: from n/a through = 1.1...

6.5CVSS5.8AI score0.00345EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/19 12:00 a.m.•4 views

PT-2024-35030

Name of the Vulnerable Software and Affected Versions SEO Themes Simple Pricing Table versions prior to 1.0.0 Description The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into...

6.5CVSS0.00279EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•7 views

CVE-2024-50532: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jerin K Alexander Events Manager Pro – extended events-manager-pro-extended allows Reflected XSS.This issue affects Events Manager Pro – extended: from n/a through = 0.1...

7.1CVSS5.8AI score0.00411EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/19 12:00 a.m.•5 views

PT-2024-34327

Name of the Vulnerable Software and Affected Versions: Bonway Static Block Editor versions 1.1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for DOM-Based XSS attacks. Recommendations...

6.5CVSS5.8AI score0.00355EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/11/19 12:00 a.m.•7 views

PT-2024-34310

Name of the Vulnerable Software and Affected Versions: Events Manager Pro – extended versions 0.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS. Recommendations: For...

7.1CVSS0.00411EPSS
SaveExploits0References4
CVE
CVE
•added 2024/11/18 4:09 p.m.•78 views

CVE-2024-52419

CVE-2024-52419 concerns the WordPress plugin Copy Anything to Clipboard (versions ≤ 4.0.3). The issue is described as an Improper Neutralization of Input During Web Page Generation leading to stored XSS in the plugin. Public sources in the connected documents identify the affected software as the...

6.5CVSS7.2AI score0.0024EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2024/11/18 4:05 p.m.•85 views

CVE-2024-52422

CVE-2024-52422 is a stored XSS in the WordPress plugin WP Githuber MD (WordPress plugin: WP Githuber MD). Affected versions are ≤ 1.16.3. The root cause is improper input neutralization during web page generation, enabling stored cross-site scripting. Public data (Patchstack/RedHat/ENISA) identif...

6.5CVSS7.2AI score0.0024EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/18 12:00 a.m.•4 views

CVE-2024-52342: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Offshorent Solutions Pvt Ltd OS BXSlider os-bxslider allows Stored XSS.This issue affects OS BXSlider: from n/a through = 2.6...

6.5CVSS5.8AI score0.00241EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/18 12:00 a.m.•4 views

CVE-2024-52394: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in verkkovaraani Print PDF Generator and Publisher nopeamedia allows Stored XSS.This issue affects Print PDF Generator and Publisher: from n/a through = 1.1.6...

6.5CVSS5.8AI score0.00227EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/18 12:00 a.m.•3 views

CVE-2024-52418: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CactusThemes Gameplan gameplan allows Reflected XSS.This issue affects Gameplan: from n/a through = 1.5.10...

7.1CVSS5.8AI score0.00287EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/18 12:00 a.m.•5 views

CVE-2024-52422: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Terry L. WP Githuber MD wp-githuber-md allows Stored XSS.This issue affects WP Githuber MD: from n/a through = 1.16.3...

6.5CVSS5.8AI score0.0024EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/12 12:00 a.m.•2 views

CVE-2024-50561: Improper Neutralization of Input During Web Page Generation

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions V8.2, RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2 All versions V8.2, SCALANCE M804PB 6GK5804-0AP00-2AA2 All versions V8.2, SCALANCE M812-1 ADSL-Router 6GK5812-1AA00-2AA2 All versions V8.2, SCALANCE...

6.1CVSS5.5AI score0.00283EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/11 12:00 a.m.•3 views

CVE-2024-52357: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lqd LIQUID BLOCKS liquid-blocks allows Stored XSS.This issue affects LIQUID BLOCKS: from n/a through = 1.2.0...

6.5CVSS5.8AI score0.00242EPSS
SaveExploits0References1
Rows per page
Query Builder