Lucene search
+L

2171 matches found

CVE
CVE
•added 2024/10/05 3:24 p.m.•82 views

CVE-2024-47369

CVE-2024-47369 is a reflected XSS vulnerability in the WordPress plugin Social Auto Poster (WPWeb Social Auto Poster/Social Auto Poster). Affected versions are up to 5.3.15 (inclusive); input is not properly neutralized during web-page generation, enabling reflected XSS. The vulnerability has bee...

7.1CVSS5.9AI score0.00327EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/10/05 3:15 p.m.•29 views

CVE-2024-47394

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eyecix JobSearch wp-jobsearch allows Reflected XSS.This issue affects JobSearch: from n/a through = 2.5.9...

7.1CVSS0.0032EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/05 12:00 a.m.•4 views

CVE-2024-47621: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Katie Zotpress zotpress allows Stored XSS.This issue affects Zotpress: from n/a through = 7.3.10...

6.5CVSS5.8AI score0.0026EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/05 12:00 a.m.•9 views

CVE-2024-47381: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in averta Depicter Slider depicter allows Stored XSS.This issue affects Depicter Slider: from n/a through = 3.2.2...

5.9CVSS5.8AI score0.00276EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/05 12:00 a.m.•3 views

PT-2024-32690

Name of the Vulnerable Software and Affected Versions DethemeKit For Elementor versions through 2.1.7 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This vulnerability allows for Stored XSS attacks...

6.5CVSS0.00261EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/05 12:00 a.m.•5 views

CVE-2024-47840: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - Apex skin allows Stored XSS.This issue affects Mediawiki - Apex skin: from 1.39.X before 1.39.9, from 1.41.X before 1.41.3, from 1.42.X before 1.42.2...

6.9CVSS5.8AI score0.0033EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/05 12:00 a.m.•4 views

CVE-2024-47372: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ThemeNcode LLC TNC PDF viewer allows Stored XSS.This issue affects TNC PDF viewer: from n/a through 3.1.0...

5.9CVSS5.8AI score0.00275EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/05 12:00 a.m.•6 views

PT-2024-32599

Name of the Vulnerable Software and Affected Versions WP-Lister Lite for eBay versions 3.6.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows Reflected XSS. Recommendations For versions...

7.1CVSS0.0032EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/05 12:00 a.m.•7 views

CVE-2024-47390: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jegtheme Jeg Elementor Kit jeg-elementor-kit allows Stored XSS.This issue affects Jeg Elementor Kit: from n/a through = 2.6.8...

6.5CVSS5.8AI score0.00261EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/05 12:00 a.m.•4 views

PT-2024-32681

Name of the Vulnerable Software and Affected Versions BSK Forms Blacklist versions 3.8.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations For versions...

7.1CVSS0.00302EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/05 12:00 a.m.•4 views

CVE-2024-47623: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GhozyLab Gallery Lightbox gallery-lightbox-slider allows Stored XSS.This issue affects Gallery Lightbox: from n/a through = 1.0.0.39...

5.9CVSS5.8AI score0.00259EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/04 12:00 a.m.•6 views

PT-2024-32849

Name of the Vulnerable Software and Affected Versions Mediawiki - Cargo versions 3.6.X through 3.6.0 Description The issue affects Mediawiki - Cargo, allowing Cross-Site Scripting XSS. This is due to an Improper Neutralization of Input During Web Page Generation vulnerability. Recommendations For...

6.9CVSS0.0041EPSS
SaveExploits1References15
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/04 12:00 a.m.•5 views

CVE-2024-43686: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Microchip TimeProvider 4100 data plot modules allows Reflected XSS.This issue affects TimeProvider 4100: from 1.0 before 2.4.7...

6.1CVSS5.8AI score0.12987EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/27 12:00 a.m.•3 views

CVE-2024-9283: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in RelaxedJS ReLaXed up to 0.2.2. Affected is an unknown function of the component Pug to PDF Converter. The manipulation leads to cross site scripting. An attack has to be approached locally. The exploit has been disclosed to the public an...

4.8CVSS3.5AI score0.00269EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/27 12:00 a.m.•6 views

CVE-2024-38308: Improper Neutralization of Input During Web Page Generation

Advantech ADAM 5550's web application includes a "logs" page where all the HTTP requests received are displayed to the user. The device doesn't correctly neutralize malicious code when parsing HTTP requests to generate page output...

8.8CVSS7.8AI score0.00312EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/18 12:00 a.m.•6 views

CVE-2024-43972: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Pagelayer Team PageLayer allows Stored XSS.This issue affects PageLayer: from n/a through 1.8.7...

5.9CVSS5.8AI score0.00312EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/18 12:00 a.m.•2 views

CVE-2024-43991: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in webdzier Hotel Galaxy allows Stored XSS.This issue affects Hotel Galaxy: from n/a through 4.4.24...

6.5CVSS5.8AI score0.00288EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/18 12:00 a.m.•4 views

CVE-2024-44003: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in spicethemes Spice Starter Sites spice-starter-sites allows Reflected XSS.This issue affects Spice Starter Sites: from n/a through = 1.2.5...

7.1CVSS5.8AI score0.00271EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/18 12:00 a.m.•6 views

CVE-2024-44005: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Stored XSS.This issue affects Greenshift: from n/a through = 9.3.7...

6.5CVSS5.8AI score0.00295EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/18 12:00 a.m.•5 views

CVE-2024-44002: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Team Showcase team allows Reflected XSS.This issue affects Team Showcase: from n/a through = 1.22.25...

7.1CVSS5.8AI score0.00307EPSS
SaveExploits0References1
Rows per page
Query Builder