CVE-2024-47385

CVE-2024-47385 is a stored XSS in the WordPress plugin “Essential Blocks for Gutenberg” (WPDeveloper). Public details indicate the vulnerability affects versions up to and including 4.8.4; exploitation is via improper neutralization of input during web page generation. The patch is available in v...

CVE-2024-47626

CVE-2024-47626 : In the WordPress plugin RomethemeKit For Elementor (affected versions:

CVE-2024-8608 Stored XSS in Oceanic Software's ValeApp

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Oceanic Software ValeApp allows Stored XSS. This issue affects ValeApp: before v2.0.0...

Telerik UI 命令注入漏洞

Telerik UI is a suite of UI User Interface controls for application development from Telerik Bulgaria. A command injection vulnerability exists in Telerik UI 2024 Q3 2024.3.806 and earlier versions, which stems from a command injection attack that can be performed via improper neutralization of...

Alisonic Sibylla

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Alisonic Equipment: Sibylla Vulnerability: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' 2. RISK EVALUATION Successful exploitation of this vulnerability...

CVE-2024-7835 Reflected XSS in Exnet Informatics Software's Ferry Reservation System

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Exnet Informatics Software Ferry Reservation System allows Reflected XSS. This issue affects Ferry Reservation System: before 240805-002...

CVE-2024-5959 Stored XSS in Eliz Software's Panel

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Eliz Software Panel allows Stored XSS. This issue affects Panel: before v2.3.24...

CVE-2024-5959 Stored XSS in Eliz Software's Panel

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Eliz Software Panel allows Stored XSS. This issue affects Panel: before v2.3.24...

CVE-2024-43995

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in sonalsinha21 Posterity allows Stored XSS.This issue affects Posterity: from n/a through 3.6...

CVE-2024-43987

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in wayneconnor Sliding Door allows Stored XSS.This issue affects Sliding Door: from n/a through 3.6...

CVE-2024-43971

CVE-2024-43971 refers to WP Sunshine Sunshine Photo Cart (WordPress) versions up to 3.2.5 and describes a reflected XSS caused by improper input neutralization during web page generation. Exploitation requires an attacker to craft malicious input, enabling execution of arbitrary scripts in a user...

CVE-2024-45451

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cryout-creations Roseta roseta allows Stored XSS.This issue affects Roseta: from n/a through = 1.3.0...

CVE-2024-44004

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows SQL Injection.This issue affects WPCargo Track & Trace: from n/a through = 8.0.2...

CVE-2024-44003

CVE-2024-44003 describes a Reflected Cross‑Site Scripting vulnerability in the WordPress plugin Spice Starter Sites . Affected versions are

CVE-2024-44008 WordPress Geo Mashup plugin <= 1.13.12 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Stored XSS.This issue affects Geo Mashup: from n/a through = 1.13.12...

CVE-2024-38860

CVE-2024-38860 affects Checkmk before versions 2.3.0p16 and 2.2.0p34. The issue is improper neutralization of input that allows attackers to craft malicious links, facilitating phishing attacks. Impact is tied to web-facing link handling and error messaging. Remediation: upgrade to Checkmk 2.3.0p...

CVE-2024-38860 Reflected links in error message facilitate phishing attacks

Improper neutralization of input in Checkmk before versions 2.3.0p16 and 2.2.0p34 allows attackers to craft malicious links that can facilitate phishing attacks...

CVE-2024-2010 Reflected XSS in TE Informatics' V5 Software

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in TE Informatics V5 allows Reflected XSS. This issue affects V5: before 6.2...

TE Informatics 安全漏洞

TE Informatics is an application from TE. A security vulnerability exists in TE Informatics that stems from an improper neutralization of labeled content...

CVE-2024-23906

CVE-2024-23906 affects Gallagher Controller 6000 and Controller 7000. The flaw is Improper Neutralization of Input During Web Page Generation (CWE-79) in the diagnostic webpage, allowing an attacker to modify controller configuration during an authenticated Operator’s session. The issue impacts m...