CVE-2023-30748: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nikola Loncar Easy Appointments allows Stored XSS.This issue affects Easy Appointments: from n/a through 3.10.7...

WordPress plugin Revy 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2024-53807

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in brandtoss WP Mailster wp-mailster allows Blind SQL Injection.This issue affects WP Mailster: from n/a through = 1.8.16.0...

CVE-2024-53807

WP Mailster (Brandtoss) CVE-2024-53807 is a SQL Injection vulnerability affecting WP Mailster versions up to 1.8.16.0. Public docs indicate an authenticated (Contributor+) SQL injection via the orderby parameter, described as Blind SQL Injection with high impact. Patch status in the CVE details i...

CVE-2024-53797: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Beaver Builder Beaver Builder beaver-builder-lite-version allows Stored XSS.This issue affects Beaver Builder: from n/a through = 2.8.4.3...

CVE-2024-54210: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codexshaper Advanced Element Bucket Addons for Elementor cs-element-bucket allows Stored XSS.This issue affects Advanced Element Bucket Addons for Elementor: from n/a through = 1.0.2...

CVE-2024-53812: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jacques Malgrange WP GeoNames wp-geonames allows Reflected XSS.This issue affects WP GeoNames: from n/a through = 1.8...

CVE-2024-51114: Improper Neutralization of Special Elements used in a Command

An issue in Beijing Digital China Yunke Information Technology Co.Ltd v.7.2.6.120 allows a remote attacker to execute arbitrary code via the code/function/dpi/webauth/customizable.php file...

CVE-2024-53792

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Bob Watu Quiz watu allows SQL Injection.This issue affects Watu Quiz: from n/a through = 3.4.1.2...

CVE-2024-52487

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webcodingplace Ultimate Classified Listings ultimate-classified-listings allows Stored XSS.This issue affects Ultimate Classified Listings: from n/a through = 1.7...

CVE-2024-52453

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in photonicgnostic Library Bookshelves library-bookshelves allows Reflected XSS.This issue affects Library Bookshelves: from n/a through = 5.8...

CVE-2024-52454

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in goqsystem GoQMieruca goqmieruca allows Reflected XSS.This issue affects GoQMieruca: from n/a through = 1.0.3...

CVE-2024-51900

CVE-2024-51900 is a stored XSS in the WordPress plugin What Would Seth Godin Do (versions

CVE-2024-53759

CVE-2024-53759 refers to a CSRF to Stored Cross‑Site Scripting (XSS) vulnerability in the WordPress plugin “ArCa Payment Gateway” (versions 1.3.1 and earlier). The issue arises from improper input neutralization during web page generation, enabling stored XSS. Affected software is the ArCa Paymen...

PT-2024-35335

Name of the Vulnerable Software and Affected Versions Dynamic "To Top" versions 3.5.2 through n/a Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Stored XSS. Recommendations For versions 3.5.2...

PT-2024-35302

Name of the Vulnerable Software and Affected Versions WP e-Commerce Style Email versions 0.6.2 and earlier Description The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows for Reflected XSS. Recommendations For versio...

CVE-2024-52457: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in youneeq Youneeq Recommendations youneeq-panel allows Reflected XSS.This issue affects Youneeq Recommendations: from n/a through = 3.0.7...

PT-2024-35815

Name of the Vulnerable Software and Affected Versions bdevs Generic Elements versions 1.2.3 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows DOM-Based XSS. This is a type of Cross-site Scripting vulnerability. Recommendation...

PT-2024-35849

Name of the Vulnerable Software and Affected Versions WooCommerce Ultimate Gift Card - Create, Sell and Manage Gift Cards with Customized Email Templates versions up to 2.9.0 Description The issue is related to improper neutralization of input during web page generation, allowing reflected...

CVE-2024-53740: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPSwings WooCommerce Ultimate Gift Card woocommerce-ultimate-gift-card allows Reflected XSS.This issue affects WooCommerce Ultimate Gift Card: from n/a through 2.9.1...