CVE-2024-34757

CVE-2024-34757 is a Stored XSS vulnerability (Improper Neutralization of Input During Web Page Generation) in Visualmodo Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg. The issue affects Borderless from version before 1.5.3, causing stored cross-site scripting thr...

PT-2024-25991

Name of the Vulnerable Software and Affected Versions DethemeKit For Elementor versions 2.1.2 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS. This means that an attacker c...

PT-2024-26201

Name of the Vulnerable Software and Affected Versions Webvitaly iFrame versions prior to 5.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations For versions...

PT-2024-26168

Name of the Vulnerable Software and Affected Versions WPBlockart Magazine Blocks versions 1.3.6 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, which can be exploited b...

CVE-2024-34436

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SKT Themes SKT Addons for Elementor allows Stored XSS.This issue affects SKT Addons for Elementor: from n/a through 1.8...

CVE-2024-34432: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BetterAddons Better Elementor Addons better-elementor-addons allows Stored XSS.This issue affects Better Elementor Addons: from n/a through 1.4.4...

CVE-2024-33952: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Justin Tadlock Unique allows Stored XSS.This issue affects Unique: from n/a through 0.3.0...

CVE-2024-4747: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Propovoice Propovoice CRM allows Stored XSS.This issue affects Propovoice CRM: from n/a through 1.7.6.2...

CVE-2024-34430: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rashed Latif TT Custom Post Type Creator allows Stored XSS.This issue affects TT Custom Post Type Creator: from n/a through 1.0...

CVE-2024-35167: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EnvoThemes Envo's Elementor Templates & Widgets for WooCommerce allows Stored XSS.This issue affects Envo's Elementor Templates & Widgets for WooCommerce: from n/a through 1.4.8...

CVE-2024-34811: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VeronaLabs WP SMS allows Stored XSS.This issue affects WP SMS: from n/a through 6.5.1...

CVE-2024-4776: Improper Neutralization of Input During Web Page Generation

A file dialog shown while in full-screen mode could have resulted in the window remaining disabled. This vulnerability affects Firefox 126...

CVE-2024-35167

CVE-2024-35167 is a Stored XSS in Envo’s Elementor Templates & Widgets for WooCommerce (Envo Elemento r for WooCommerce). The issue arises from improper input neutralization during web page generation, affecting versions from non-applicable to 1.4.8. Public references in connected documents confi...

PT-2024-32627

Name of the Vulnerable Software and Affected Versions Propovoice CRM versions 1.7.6.2 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject malicious...

CVE-2024-34425

CVE-2024-34425 is a Stored XSS in the QuickieBar WordPress plugin (Phil Baylog QuickieBar). Affected: QuickieBar versions up to and including 1.8.4. Root cause described as improper neutralization during web page generation; no public details on exploitation or fixes are provided in the connected...

PT-2024-25891

Name of the Vulnerable Software and Affected Versions Form Maker by 10Web versions 1.15.24 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For...

CVE-2024-34546

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Habibur Rahman Sticky Social Link sticky-social-link allows DOM-Based XSS.This issue affects Sticky Social Link: from n/a through = 2.0.1...

CVE-2024-34547

CVE-2024-34547 is a Stored XSS vulnerability in Magical Addons For Elementor for WordPress. Affected versions are from n/a through 1.1.34. Root cause: Improper neutralization of input during web page generation, enabling injection that persists in stored content. Impact: stored cross-site scripti...

CVE-2024-34562

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Moveaddons Move Addons for Elementor allows Stored XSS.This issue affects Move Addons for Elementor: from n/a through 1.3.0...

CVE-2024-34566

CVE-2024-34566 is a Stored XSS in Content Blocks (Custom Post Widget) for WordPress. The issue arises from improper input neutralization during web page generation. Affected: Content Blocks (Custom Post Widget)