5513 matches found
VulnCheck KEV: CVE-2024-33551
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in 8theme XStore Core allows SQL Injection.This issue affects XStore Core: from n/a through 5.3.5...
CVE-2023-23989
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Metagauss RegistrationMagic.This issue affects RegistrationMagic: from n/a through 5.1.9.2...
CVE-2023-23989
CVE-2023-23989 affects the WordPress RegistrationMagic plugin up to version 5.1.9.2. It is an Improper Neutralization of Input During Web Page Generation (XSS) vulnerability causing content injection via untrusted input in RegistrationMagic. Root cause: insufficient input sanitization during page...
CVE-2024-32702
The ARForms WordPress plugin (versions
CVE-2024-32721
CVE-2024-32721 concerns the WordPress Jeg Elementor Kit plugin, with Stored XSS in the Testimonial Widget Attributes affecting versions up to 2.6.3. Red Hat notes insufficient input sanitization and output escaping, enabling authenticated attackers with contributor access or higher to inject scri...
CVE-2024-32723
CVE-2024-32723 affects the WordPress plugin Advanced Floating Content Lite (v0 through 1.2.5). It is a Stored XSS due to improper neutralization of input during web page generation. The connected documents do not provide a specific exploit path or a confirmed fix/version beyond the affected range.
CVE-2024-32952
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BloomPixel Max Addons Pro for Bricks allows Reflected XSS.This issue affects Max Addons Pro for Bricks: from n/a through 1.6.1...
CVE-2024-32791
CVE-2024-32791 affects Premium Addons for Elementor (LeaP13 Premium Addons for Elementor) with a Stored XSS in versions up to 4.10.25 due to improper input neutralization during web page generation. Affected product: Premium Addons for Elementor. Root cause: insufficient escaping/validation of sh...
CVE-2024-32801
Technical details for CVE-2024-32801 are not provided in the connected documents. No specifics on affected product/version/root cause/fix are given beyond the initial XSS description. Monitor for updates.
CVE-2024-32956
CVE-2024-32956: Stored XSS in RomethemeKit For Elementor (WordPress plugin). Affected: RomethemeKit For Elementor up to version 1.4.1. Root cause: improper input handling during web page generation leading to stored cross-site scripting. Impact details are limited in the provided documents beyond...
CVE-2024-32709
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Plechev Andrey WP-Recall.This issue affects WP-Recall: from n/a through 16.26.5...
CVE-2024-32706
The ARForms WordPress plugin (versions
CVE-2024-32834: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebToffee WooCommerce Shipping Label allows Stored XSS.This issue affects WooCommerce Shipping Label: from n/a through 2.3.8...
PT-2024-24875
Name of the Vulnerable Software and Affected Versions ShapedPlugin Widget Post Slider versions 1.3.5 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can injec...
PT-2024-25003
Name of the Vulnerable Software and Affected Versions RomethemeKit For Elementor versions 1.4.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For...
CVE-2023-25790: Improper Authentication
Improper Authentication, Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xtemos WoodMart allows Cross-Site Scripting XSS.This issue affects WoodMart: from n/a through 7.0.4...
CVE-2024-32723: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Code Tides Advanced Floating Content allows Stored XSS.This issue affects Advanced Floating Content: from n/a through 1.2.5...
PT-2024-24909
Name of the Vulnerable Software and Affected Versions WebToffee WooCommerce Shipping Label versions 2.3.8 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...
CVE-2024-32707: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GhozyLab Image Slider Widget allows Stored XSS.This issue affects Image Slider Widget: from n/a through 1.1.125...