PT-2024-30820

Name of the Vulnerable Software and Affected Versions Gianni Porto IntoTheDark versions 1.0.0 through 1.0.5 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks. Recommendatio...

PT-2024-30814

Name of the Vulnerable Software and Affected Versions CryoutCreations Esotera versions 1.2.5.1 and earlier Description The issue is related to improper neutralization of input during web page generation, which leads to a Stored XSS vulnerability. This vulnerability occurs due to the improper...

CVE-2024-43961: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in azurecurve azurecurve Toggle Show/Hide allows Stored XSS.This issue affects azurecurve Toggle Show/Hide: from n/a through 2.1.3...

CVE-2024-43921: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Magic Post Thumbnail allows Reflected XSS.This issue affects Magic Post Thumbnail: from n/a through 5.2.9...

CVE-2024-43936: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPDeveloper EmbedPress allows Stored XSS.This issue affects EmbedPress: from n/a through 4.0.8...

PT-2024-30826

Name of the Vulnerable Software and Affected Versions DSGVO All in one for WP versions n/a through 4.5 Description The issue is related to Improper Neutralization of Input During Web Page Generation, which allows Stored Cross-site Scripting XSS. This is a type of security vulnerability that occur...

CVE-2024-43934: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Robert Felty Collapsing Archives allows Stored XSS.This issue affects Collapsing Archives: from n/a through 3.0.5...

CVE-2024-41174: Improper Neutralization of Input During Web Page Generation

The IPC-Diagnostics package in TwinCAT/BSD is susceptible to improper input neutralization by a low-privileged local attacker...

CVE-2024-43317: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Metagauss User Registration Team RegistrationMagic allows Cross-Site Scripting XSS.This issue affects RegistrationMagic: from n/a through 6.0.1.0...

CVE-2024-43284

CVE-2024-43284 : Affects the WordPress plugin WP Travel Gutenberg Blocks (Stored XSS). The vulnerability is in WP Travel Gutenberg Blocks versions up to 3.5.1 (n/a to 3.5.1) and stems from Improper Neutralization of Input During Web Page Generation. Impact is stored cross-site scripting (XSS) as ...

CVE-2024-43313

CVE-2024-43313 describes an XSS vulnerability in the WordPress plugin FormFacade (Google Forms) via Reflected XSS due to improper input neutralization during web page generation. Affected versions are listed as from n/a through 1.3.2. The issue’s root cause is improper input handling in the web p...

CVE-2024-43320

CVE-2024-43320 is a stored XSS vulnerability in Livemesh Addons for WPBakery Page Builder (WPBakery Addons by Livemesh). Affected: Livemesh Addons for WPBakery Page Builder (up to and including 3.9). Root cause: Improper neutralization of input during web page generation. Impact statements are li...

CVE-2024-43329: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WP Chill Allegiant allegiant allows Stored XSS.This issue affects Allegiant: from n/a through 1.2.7...

PT-2024-30516

Name of the Vulnerable Software and Affected Versions AREOI All Bootstrap Blocks versions 1.3.19 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS. This means that an attacke...

CVE-2024-43307: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Gordon Böhme, Antonio Leutsch Structured Content allows Stored XSS.This issue affects Structured Content: from n/a through 1.6.2...

CVE-2024-43294: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BoldThemes Bold Timeline Lite allows Stored XSS.This issue affects Bold Timeline Lite: from n/a through 1.2.0...

PT-2024-30496

Name of the Vulnerable Software and Affected Versions WP Chill Allegiant versions 1.2.7 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations For...

PT-2024-30401

Name of the Vulnerable Software and Affected Versions weDevs weMail versions 1.14.5 and earlier Description The issue is related to improper neutralization of input during web page generation, allowing reflected Cross-site Scripting XSS. This enables attackers to inject malicious scripts into...

PT-2024-30442

Name of the Vulnerable Software and Affected Versions Meta Field Block versions 1.2.13 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations For...

PT-2024-30515

Name of the Vulnerable Software and Affected Versions Iznyn Purity Of Soul versions n/a through 1.9 Description The issue affects Iznyn Purity Of Soul, allowing Reflected XSS due to Improper Neutralization of Input During Web Page Generation. This is a type of Cross-site Scripting vulnerability...