CVE-2024-43966

CVE-2024-43966 : Vulnerability in WP Testimonial Widget (WordPress plugin) with an SQL injection caused by improper neutralization. Affected: WP Testimonial Widget from n/a to 3.1. Exposure requires authenticated access (Admin+) and currently shows as unpatched; no exploits details provided in th...

GO-2022-0939 Improper Neutralization of Special Elements used in an LDAP Query in stevenweathers/thunderdome-planning-poker in github.com/StevenWeathers/thunderdome-planning-poker

Improper Neutralization of Special Elements used in an LDAP Query in stevenweathers/thunderdome-planning-poker in github.com/StevenWeathers/thunderdome-planning-poker...

CVE-2024-42335 7Twenty - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

7Twenty - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-41697

Priority - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS...

CVE-2024-41697

Priority - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS...

CVE-2024-41697 Priority – CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Priority - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS...

CVE-2024-41697

CVE-2024-41697 corresponds to a Basic XSS (CWE-80) vulnerability with CVSS v3.1 metrics: Network attack vector, low attack complexity, no privileges required, user interaction required, and scope changed. Exploitation status is not indicated in the provided documents; the impact is limited to con...

CVE-2024-43246

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in creativeon WHMpress allows Reflected XSS.This issue affects WHMpress: from n/a through 6.2-revision-5...

CVE-2024-43284

CVE-2024-43284 : Affects the WordPress plugin WP Travel Gutenberg Blocks (Stored XSS). The vulnerability is in WP Travel Gutenberg Blocks versions up to 3.5.1 (n/a to 3.5.1) and stems from Improper Neutralization of Input During Web Page Generation. Impact is stored cross-site scripting (XSS) as ...

CVE-2024-43313

CVE-2024-43313 describes an XSS vulnerability in the WordPress plugin FormFacade (Google Forms) via Reflected XSS due to improper input neutralization during web page generation. Affected versions are listed as from n/a through 1.3.2. The issue’s root cause is improper input handling in the web p...

CVE-2024-43320

CVE-2024-43320 is a stored XSS vulnerability in Livemesh Addons for WPBakery Page Builder (WPBakery Addons by Livemesh). Affected: Livemesh Addons for WPBakery Page Builder (up to and including 3.9). Root cause: Improper neutralization of input during web page generation. Impact statements are li...

CVE-2024-43330

CVE-2024-43330 concerns PowerPack for Beaver Builder. It is a Reflected Cross-Site Scripting vulnerability in PowerPack for Beaver Builder (IdeaBox Creations) that affects versions up to 2.37.3 (and before 2.37.4). The root cause is improper input neutralization during web page generation, enabli...

CVE-2024-43238

CVE-2024-43238: WeMail for WordPress has a Reflected XSS in web page generation. Affected: the weMail plugin up to version 1.14.5 (from n/a through 1.14.5). According to the connected docs, the issue is publicly associated with this CVE and has a patch status indicating it was addressed (patched)...

CVE-2024-43353

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through = 2.7.2...

CVE-2024-38724

Cross-Site Request Forgery CSRF, Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Muhammad Rehman Contact Form 7 Summary and Print allows Stored XSS.This issue affects Contact Form 7 Summary and Print: from n/a through 1.2.5...

CVE-2024-38724

CVE-2024-38724 affects the WordPress plugin Contact Form 7 Summary and Print (versions up to 1.2.5). The issue combines Cross-Site Request Forgery (CSRF) and an input handling flaw that enables Stored XSS during web page generation. The description indicates Stored XSS can be triggered via the pl...

CVE-2024-35775

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting', Improper Authentication vulnerability in Soliloquy Team Slider by Soliloquy allows Cross-Site Scripting XSS.This issue affects Slider by Soliloquy: from n/a through 2.7.6...

CVE-2024-43216

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Filr filr-protection.This issue affects Filr: from n/a through = 1.2.4...

CVE-2024-43218

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mediavine Mediavine Control Panel mediavine-control-panel.This issue affects Mediavine Control Panel: from n/a through = 2.10.4...

CVE-2024-43161

CVE-2024-43161 involves an improperly neutralized input in Averta Depicter Slider, enabling stored XSS. Affected: Depicter Slider versions up to and including 3.1.2. Mode of attack: authenticated (Editor+) Stored Cross-Site Scripting. Impact is cross-site script execution within the application c...