5535 matches found
CVE-2024-51857: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DannyCooper Olympus Shortcodes olympus-shortcodes allows DOM-Based XSS.This issue affects Olympus Shortcodes: from n/a through = 1.0.4...
PT-2024-35025
Name of the Vulnerable Software and Affected Versions Topbar ID for Elementor versions 1.0.1 and earlier Description The issue affects the Topbar ID for Elementor plugin, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This is a high-severity XSS...
PT-2024-34315
Name of the Vulnerable Software and Affected Versions: Stefano Marra Smart Mockups versions 1.2.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations:...
PT-2024-35021
Name of the Vulnerable Software and Affected Versions geoWP Geoportail Shortcode versions through 2.4.4 Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This can be exploited by attackers. The...
PT-2024-34955
Name of the Vulnerable Software and Affected Versions Beacon For Help Scout versions 1.3.0 and earlier Description The issue affects the Beacon For Help Scout plugin, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This can lead to cross-site scripting...
PT-2024-35046
Name of the Vulnerable Software and Affected Versions Mapme versions 1.3.2 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into the website, potential...
CVE-2024-51879: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arash Heidari Text Advertisements text-advertisements allows Stored XSS.This issue affects Text Advertisements: from n/a through = 2.1...
CVE-2024-51812: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wasim Pro Addons For Elementor pro-addons-for-elementor allows Stored XSS.This issue affects Pro Addons For Elementor: from n/a through = 1.5.0...
CVE-2024-51912: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lilaeamedia IntelliWidget Elements intelliwidget-elements allows DOM-Based XSS.This issue affects IntelliWidget Elements: from n/a through = 2.2.7...
PT-2024-34299
Name of the Vulnerable Software and Affected Versions: WeChat Subscribers Lite versions 1.6.6 and earlier Description: The issue affects WeChat Subscribers Lite, allowing Reflected XSS due to improper neutralization of input during web page generation. This is a type of Cross-site Scripting...
CVE-2024-51851: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in salehattari best bootstrap widgets for elementor best-bootstrap-widgets-for-elementor allows DOM-Based XSS.This issue affects best bootstrap widgets for elementor: from n/a through = 1.0...
CVE-2024-51827: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Movement Ventures Boombox Shortcode boombox-shortcode allows DOM-Based XSS.This issue affects Boombox Shortcode: from n/a through = 1.0.0...
PT-2024-34932
Name of the Vulnerable Software and Affected Versions Awesome Fitness Testimonials versions 1.0.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations Fo...
CVE-2024-51858: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginOps Social Locker social-locker-content allows Stored XSS.This issue affects Social Locker: from n/a through = 1.1...
CVE-2024-51872: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in luzuk Themes Luzuk Testimonials luzuk-testimonials allows Stored XSS.This issue affects Luzuk Testimonials: from n/a through = 0.0.1...
CVE-2024-51936: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eSparkBiz ESB Testimonials esb-testimonials allows Stored XSS.This issue affects ESB Testimonials: from n/a through = 1.0.0...
CVE-2024-51923: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Websand Websand Subscription Form websand-subscription-form allows Stored XSS.This issue affects Websand Subscription Form: from n/a through = 1.0.3...
CVE-2024-51891: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SalesWizard.pl Official SalesWizard CRM Plugin official-saleswizard-crm allows Stored XSS.This issue affects Official SalesWizard CRM Plugin: from n/a through = 1.0.3...
CVE-2024-51814: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 野人 活动链接推广插件 yr-activity-link allows DOM-Based XSS.This issue affects 活动链接推广插件: from n/a through = 1.2.0...
CVE-2024-51901: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wojciechborowicz Smooth Maps colour-smooth-maps allows Stored XSS.This issue affects Smooth Maps: from n/a through = 1.1...