CVE-2024-33631: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Piotnet Piotnet Addons For Elementor Pro allows Stored XSS.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17...

CVE-2024-33537: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Theme Horse WP Portfolio allows Stored XSS.This issue affects WP Portfolio: from n/a through 2.4...

CVE-2024-33540: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGrill ColorNews allows Stored XSS.This issue affects ColorNews: from n/a through 1.2.6...

CVE-2024-33696

CVE-2024-33696 describes a stored cross-site scripting vulnerability in the Broadstreet XPRESS WordPress Ad Widget. The Red Hat security entry mirrors this vulnerability, noting the issue as an “Improper Neutralization of Input During Web Page Generation” affecting the WordPress Ad Widget until v...

CVE-2024-33598

Technical details about CVE-2024-33598 are not provided in the Connected Documents. The Initial description notes a Stored XSS in the WordPress Annual Archive (up to 1.6.0). Monitor for updates; no specifics on affected versions, vectors, or remediation are included.

CVE-2024-33642: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EkoJR Advanced Post List allows Stored XSS.This issue affects Advanced Post List: from n/a through 0.5.6.1...

CVE-2023-23989

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Metagauss RegistrationMagic.This issue affects RegistrationMagic: from n/a through 5.1.9.2...

CVE-2023-23989

CVE-2023-23989 affects the WordPress RegistrationMagic plugin up to version 5.1.9.2. It is an Improper Neutralization of Input During Web Page Generation (XSS) vulnerability causing content injection via untrusted input in RegistrationMagic. Root cause: insufficient input sanitization during page...

CVE-2024-32791

CVE-2024-32791 affects Premium Addons for Elementor (LeaP13 Premium Addons for Elementor) with a Stored XSS in versions up to 4.10.25 due to improper input neutralization during web page generation. Affected product: Premium Addons for Elementor. Root cause: insufficient escaping/validation of sh...

CVE-2024-32801

Technical details for CVE-2024-32801 are not provided in the connected documents. No specifics on affected product/version/root cause/fix are given beyond the initial XSS description. Monitor for updates.

CVE-2024-32956

CVE-2024-32956: Stored XSS in RomethemeKit For Elementor (WordPress plugin). Affected: RomethemeKit For Elementor up to version 1.4.1. Root cause: improper input handling during web page generation leading to stored cross-site scripting. Impact details are limited in the provided documents beyond...

CVE-2024-32834: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebToffee WooCommerce Shipping Label allows Stored XSS.This issue affects WooCommerce Shipping Label: from n/a through 2.3.8...

PT-2024-24875

Name of the Vulnerable Software and Affected Versions ShapedPlugin Widget Post Slider versions 1.3.5 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can injec...

PT-2024-25003

Name of the Vulnerable Software and Affected Versions RomethemeKit For Elementor versions 1.4.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For...

CVE-2023-25790: Improper Authentication

Improper Authentication, Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xtemos WoodMart allows Cross-Site Scripting XSS.This issue affects WoodMart: from n/a through 7.0.4...

CVE-2024-32723: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Code Tides Advanced Floating Content allows Stored XSS.This issue affects Advanced Floating Content: from n/a through 1.2.5...

PT-2024-24909

Name of the Vulnerable Software and Affected Versions WebToffee WooCommerce Shipping Label versions 2.3.8 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

CVE-2024-32707: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GhozyLab Image Slider Widget allows Stored XSS.This issue affects Image Slider Widget: from n/a through 1.1.125...

CVE-2024-32553

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in looksawesome Superfly Menu superfly-menu.This issue affects Superfly Menu: from n/a through = 5.0.25...

CVE-2024-32564

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPXPO PostX ultimate-post allows DOM-Based XSS.This issue affects PostX: from n/a through = 4.0.1...