Lucene search
+L

5529 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/29 12:00 a.m.•5 views

CVE-2024-49650: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xarbo BuddyPress Greeting Message bp-greeting-message allows Reflected XSS.This issue affects BuddyPress Greeting Message: from n/a through = 1.0.3...

7.1CVSS5.8AI score0.00304EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/29 12:00 a.m.•6 views

PT-2024-33599

Name of the Vulnerable Software and Affected Versions ioannup Code Generate versions n/a through 1.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations For versions...

7.1CVSS5.8AI score0.00304EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/29 12:00 a.m.•7 views

CVE-2024-49643: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fifthsegment Whitelist fifthsegment-whitelist allows Reflected XSS.This issue affects Whitelist: from n/a through = 3.5...

7.1CVSS5.8AI score0.00288EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/29 12:00 a.m.•4 views

PT-2024-33592

Name of the Vulnerable Software and Affected Versions Risk Warning Bar versions n/a through 1.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations For versions n/a...

7.1CVSS5.7AI score0.00351EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/10/29 12:00 a.m.•4 views

PT-2024-33596

Name of the Vulnerable Software and Affected Versions Rafasashi Todo Custom Field versions n/a through 3.0.4 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations For...

7.1CVSS5.8AI score0.00288EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/29 12:00 a.m.•6 views

CVE-2024-49648: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rafasashi SVG Captcha svg-captcha allows Reflected XSS.This issue affects SVG Captcha: from n/a through = 1.0.11...

7.1CVSS5.8AI score0.00304EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/29 12:00 a.m.•6 views

CVE-2024-49642: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rafasashi Todo Custom Field todo-custom-field allows Reflected XSS.This issue affects Todo Custom Field: from n/a through = 3.0.4...

7.1CVSS5.8AI score0.00288EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/29 12:00 a.m.•5 views

CVE-2024-49664: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in chatplusjp chatplusjp chatplusjp allows Reflected XSS.This issue affects chatplusjp: from n/a through = 1.02...

7.1CVSS5.8AI score0.00306EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/29 12:00 a.m.•3 views

CVE-2024-44081: Improper Neutralization of Input During Web Page Generation

In Jitsi Meet before 2.0.9779, the functionality to share a video file was implemented in an insecure way, resulting in clients loading videos from an arbitrary URL if a message from another participant contains a URL encoded in the expected format...

9.8CVSS8.2AI score0.00749EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/29 12:00 a.m.•6 views

CVE-2024-49662: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webgensis Simple Load More simple-load-more allows Reflected XSS.This issue affects Simple Load More: from n/a through = 1.0...

7.1CVSS5.8AI score0.00306EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/29 12:00 a.m.•5 views

CVE-2024-47640: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weDevs WP ERP erp allows Reflected XSS.This issue affects WP ERP: from n/a through = 1.13.2...

7.1CVSS5.8AI score0.00374EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/29 12:00 a.m.•6 views

CVE-2024-50411: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kevon Adonis WP Abstracts wp-abstracts-manuscripts-manager allows Stored XSS.This issue affects WP Abstracts: from n/a through = 2.7.1...

5.9CVSS5.8AI score0.00276EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/29 12:00 a.m.•3 views

CVE-2024-50412: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jules Colle Conditional Fields for Contact Form 7 cf7-conditional-fields allows Stored XSS.This issue affects Conditional Fields for Contact Form 7: from n/a through = 2.4.15...

5.9CVSS5.8AI score0.00274EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/28 7:15 p.m.•29 views

CVE-2024-50432

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Cross-Site Scripting XSS.This issue affects Post Grid and Gutenberg Blocks: from n/a through = 2.2.93...

6.5CVSS0.00275EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/28 6:15 p.m.•31 views

CVE-2024-50464

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pierre Lebedel Kodex Posts likes kodex-posts-likes.This issue affects Kodex Posts likes: from n/a through = 2.5.0...

6.5CVSS0.00275EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/28 6:15 p.m.•28 views

CVE-2024-50469

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brightvesseldev Textboxes textboxes allows DOM-Based XSS.This issue affects Textboxes: from n/a through = 0.1.3.1...

6.5CVSS0.00269EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/28 6:15 p.m.•24 views

CVE-2024-50462

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in html5maps Interactive World Map interactive-world-map allows Stored XSS.This issue affects Interactive World Map: from n/a through = 3.4.4...

6.5CVSS0.0026EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/28 6:15 p.m.•24 views

CVE-2024-50447

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EnvoThemes Envo's Elementor Templates & Widgets for WooCommerce envo-elementor-for-woocommerce allows Stored XSS.This issue affects Envo's Elementor Templates & Widgets for WooCommerce: from n/a...

6.5CVSS0.00261EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/28 6:15 p.m.•30 views

CVE-2024-50439

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Astra Widgets astra-widgets allows Stored XSS.This issue affects Astra Widgets: from n/a through = 1.2.14...

6.5CVSS0.00254EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/28 5:42 p.m.•64 views

CVE-2024-50468

CVE-2024-50468 describes a DOM-based XSS in WordPress plugin Raptor Editor (versions

6.5CVSS5.9AI score0.00269EPSS
SaveExploits0References1
Rows per page
Query Builder