PT-2024-30430

Name of the Vulnerable Software and Affected Versions Mega Addons For Elementor versions 1.9 and earlier Description The issue affects Mega Addons For Elementor, allowing Stored XSS due to improper neutralization of input during web page generation. This is a type of Cross-site Scripting XSS...

PT-2024-30442

Name of the Vulnerable Software and Affected Versions Meta Field Block versions 1.2.13 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations For...

PT-2024-30515

Name of the Vulnerable Software and Affected Versions Iznyn Purity Of Soul versions n/a through 1.9 Description The issue affects Iznyn Purity Of Soul, allowing Reflected XSS due to Improper Neutralization of Input During Web Page Generation. This is a type of Cross-site Scripting vulnerability...

PT-2024-30513

Name of the Vulnerable Software and Affected Versions Wow-Company Modal Window versions n/a through 6.0.3 Description The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS Cross-site Scripting attacks. This problem affects the Modal Windo...

CVE-2024-43330: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in IdeaBox Creations PowerPack for Beaver Builder allows Reflected XSS.This issue affects PowerPack for Beaver Builder: from n/a before 2.37.4...

PT-2024-30407

Name of the Vulnerable Software and Affected Versions WHMpress versions n/a through 6.2-revision-5 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations For versions n...

CVE-2024-43308: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Gutentor Gutentor - Gutenberg Blocks - Page Builder for Gutenberg Editor allows Stored XSS.This issue affects Gutentor - Gutenberg Blocks - Page Builder for Gutenberg Editor: from n/a throug...

CVE-2024-43278: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Phi Phan Meta Field Block allows Stored XSS.This issue affects Meta Field Block: from n/a through 1.2.13...

CVE-2024-43309: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WP Socio WP Telegram Widget and Join Link allows Stored XSS.This issue affects WP Telegram Widget and Join Link: from n/a through 2.1.27...

PT-2024-30470

Name of the Vulnerable Software and Affected Versions White Label CMS versions 2.7.4 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations Update to versio...

CVE-2024-43303: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in videousermanuals.Com White Label CMS allows Reflected XSS.This issue affects White Label CMS: from n/a through 2.7.4...

PT-2024-30475

Name of the Vulnerable Software and Affected Versions Gutentor - Gutenberg Blocks - Page Builder for Gutenberg Editor versions 3.3.5 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows...

CVE-2024-43335: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CyberChimps Responsive Blocks – WordPress Gutenberg Blocks allows Stored XSS.This issue affects Responsive Blocks – WordPress Gutenberg Blocks: from n/a through 1.8.8...

CVE-2024-43321: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PickPlugins Team Showcase allows Stored XSS.This issue affects Team Showcase: from n/a through 1.22.23...

PT-2024-30460

Name of the Vulnerable Software and Affected Versions Bold Timeline Lite versions 1.2.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations For...

PT-2024-30404

Name of the Vulnerable Software and Affected Versions Ultimate Membership Pro versions n/a through 12.6 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations For...

CVE-2024-43808: Improper Neutralization of Input During Web Page Generation

In JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault plugin...

CVE-2024-38724

Cross-Site Request Forgery CSRF, Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Muhammad Rehman Contact Form 7 Summary and Print allows Stored XSS.This issue affects Contact Form 7 Summary and Print: from n/a through 1.2.5...

CVE-2024-38724

CVE-2024-38724 affects the WordPress plugin Contact Form 7 Summary and Print (versions up to 1.2.5). The issue combines Cross-Site Request Forgery (CSRF) and an input handling flaw that enables Stored XSS during web page generation. The description indicates Stored XSS can be triggered via the pl...

CVE-2024-38724: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF, Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Muhammad Rehman Contact Form 7 Summary and Print allows Stored XSS.This issue affects Contact Form 7 Summary and Print: from n/a through 1.2.5...