5529 matches found
CVE-2024-51674: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fast Themes Sastra Essential Addons for Elementor sastra-essential-addons-for-elementor allows DOM-Based XSS.This issue affects Sastra Essential Addons for Elementor: from n/a through = 1.0.5...
CVE-2024-51605: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Genoo Genoo genoo allows DOM-Based XSS.This issue affects Genoo: from n/a through = 6.0.10...
CVE-2024-51695: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yes We Work Fabrica Synced Pattern Instances fabrica-reusable-block-instances allows Reflected XSS.This issue affects Fabrica Synced Pattern Instances: from n/a through = 1.0.8...
CVE-2024-51613: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bidbud TradeMe widgets trademe-widget allows Stored XSS.This issue affects TradeMe widgets: from n/a through = 1.2...
CVE-2024-51670: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JoomSky JS Help Desk js-support-ticket allows Stored XSS.This issue affects JS Help Desk: from n/a through = 2.8.7...
PT-2024-34821
Name of the Vulnerable Software and Affected Versions WP Delicious Delisho versions 1.0.0 through 1.0.6 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. The vulnerability is due ...
CVE-2024-51611: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Miguel Peixe WP Feature Box wp-feature-box allows Stored XSS.This issue affects WP Feature Box: from n/a through = 0.1.3...
CVE-2024-50544: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MicahBlu RSVP ME rsvp-me allows SQL Injection.This issue affects RSVP ME: from n/a through = 1.9.9...
CVE-2024-50340: Improper Neutralization of Special Elements in Output Used by a Downstream Component
symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. When the registerargvargc php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by...
CVE-2024-9579: Improper Neutralization of Special Elements used in a Command
A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself...
CVE-2024-51678
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marcel Pol Elo Rating Shortcode elo-rating-shortcode allows Stored XSS.This issue affects Elo Rating Shortcode: from n/a through = 1.0.3...
CVE-2024-51682
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasThemes HT Builder – WordPress Theme Builder for Elementor ht-builder allows Stored XSS.This issue affects HT Builder – WordPress Theme Builder for Elementor: from n/a through = 1.3.0...
CVE-2024-51682
CVE-2024-51682 is a stored XSS in HasThemes HT Builder – WordPress Theme Builder for Elementor (HT Builder) up to version 1.3.0. The vulnerability arises from improper input neutralization during web page generation, allowing stored XSS. Patchstack indicates fixed in 1.3.1; Red Hat/ENISA referenc...
CVE-2024-51681: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeRevolution WP Pocket URLs wp-pocket-urls allows Stored XSS.This issue affects WP Pocket URLs: from n/a through = 1.0.3...
CVE-2024-49641
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tidaweb Tida URL Screenshot tida-url-screenshot allows Reflected XSS.This issue affects Tida URL Screenshot: from n/a through = 1.0.1...
CVE-2024-49636
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in woracal Agile Video Player Lite agile-video-player allows Reflected XSS.This issue affects Agile Video Player Lite: from n/a through = 1.0...
CVE-2024-47640
CVE-2024-47640 affects the WP ERP WordPress plugin: a reflected XSS in WP ERP
CVE-2024-49639
CVE-2024-49639 concerns a Reflected XSS in the WordPress Monitor.chat plugin (versions n/a through 1.1.1). The initial description confirms Reflected XSS affecting Monitor.chat
CVE-2024-49673
CVE-2024-49673 concerns the WordPress LaTeX2HTML plugin where the vulnerability is a reflected Cross-Site Scripting (XSS) in versions n/a through 2.5.4. The issue is described as improper input neutralization during web page generation. Public sources in connected documents indicate the vulnerabi...