CVE-2024-31387

CVE-2024-31387 affects the Popup Like box – Page Plugin for WordPress (Popup Like box). It is a Stored XSS due to Improper Neutralization of Input During Web Page Generation, impacting versions from n/a to 3.7.2. The root cause is improper handling of input in web page generation, enabling stored...

CVE-2024-31928

Consolidated view: CVE-2024-31928 affects the WP Darko Top Bar (WordPress plugin). It is a stored XSS caused by improper input neutralization during web page generation, affecting Top Bar versions up to 3.0.5 (n/a to 3.0.5). Root cause: inadequate sanitization of input that is embedded into gener...

CVE-2024-31258

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Micro.Company Form to Chat App allows Stored XSS.This issue affects Form to Chat App: from n/a through 1.1.6...

CVE-2024-31256

CVE-2024-31256 is a Reflected XSS in the WordPress WebinarPress (WP Webinar System) plugin. Affected: WebinarPress versions up to 1.33.10. Root cause: improper neutralization of input during web page generation. Impact: potential disclosure/remote script execution via crafted input (low to modera...

CVE-2024-30524

CVE-2024-30524 : Stored XSS in RedLettuce PDF Viewer for Elementor caused by improper input neutralization during web page generation. Affected: PDF Viewer for Elementor versions up to 2.9.3 (vendor listing notes “from n/a through 2.9.3”). CVSS v3.1 base score 5.4 (medium); impact limited to conf...

CVE-2024-30556

Technical details beyond the initial description for CVE-2024-30556 are not present in the connected documents. The vulnerability is described as Stored XSS in Mighty Classic Pros And Cons plugin; no further product/version specifics or patch info are provided here. Monitor for updates.

CVE-2024-31108

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iFlyChat Team iFlyChat – WordPress Chat iflychat allows Stored XSS.This issue affects iFlyChat – WordPress Chat: from n/a through 4.7.2...

CVE-2024-31102

CVE-2024-31102 is an input‑sanitization issue in the WordPress plugin Prenotazioni (by Scimone Ignazio) that allows Stored XSS via improper neutralization of input during web page generation. Affected range: Prenotazioni versions up to 1.7.4 (no details on fixed versions provided). Impact per the...

CVE-2024-30431

CVE-2024-30431 describes a Reflected XSS in the WordPress plugin Mang Board WP . The issue is caused by improper input neutralization during web page generation, affecting Mang Board WP versions from n/a through 1.8.0. Connected sources confirm the vulnerability type and affected version range; n...

CVE-2024-30444

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zionbuilder.Io WordPress Page Builder – Zion Builder allows Stored XSS.This issue affects WordPress Page Builder – Zion Builder: from n/a through 3.6.9...

CVE-2024-30444

CVE-2024-30444 describes a stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Zion Builder (zionbuilder.io). According to the Red Hat entry, the issue is caused by improper neutralization of input during web page generation, enabling stored XSS. The vulnerability affects Zion...

CVE-2024-30447

Technical details about CVE-2024-30447 (Creative Image Slider – Responsive Slider Plugin) are not provided in the connected documents. No product version, root cause, impact, or patch information is publicly available here; monitor for official advisories and vendor/user notifications.

CVE-2024-30449

CVE-2024-30449 : Reflected Cross‑Site Scripting in Booking Activities WordPress plugin. The issue is described as improper neutralization of input during web page generation, affecting Booking Activities versions up to 1.15.19 (inclusive). The connected Red Hat entry confirms the same vulnerabili...

CVE-2024-30429

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hans Matzen allows Stored XSS.This issue affects wp-forecast: from n/a through 9.2...

CVE-2024-30428

CVE-2024-30428 is described as a Reflected XSS in Contest Gallery, but the provided documents do not include concrete technical details (affected versions, root cause, or fix). Monitor for updates.

CVE-2024-30520

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Labib Ahmed Carousel Anything For WPBakery Page Builder allows Stored XSS.This issue affects Carousel Anything For WPBakery Page Builder: from n/a through 2.1...

CVE-2024-30423

CVE-2024-30423 is an Stored XSS vulnerability in the WordPress plugin Better Elementor Addons, affecting versions from n/a up to 1.3.7. The initial description attributes the flaw to improper neutralization of input during web page generation. Red Hat’s entry provides the same description. The co...

CVE-2024-28002

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Archetyped Cornerstone allows Reflected XSS.This issue affects Cornerstone: from n/a through 0.8.0...

CVE-2024-30200

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in realmag777 BEAR allows Reflected XSS.This issue affects BEAR: from n/a through 1.1.4.2...

CVE-2024-30200

The CVE-2024-30200 entry describes a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress BEAR plugin (BEAR – Bulk Editor and Products Manager) by Pluginus.Net, affecting versions up to and including 1.1.4.2. The issue arises from insufficient input sanitization and output escaping...