2733 matches found
CVE-2024-47394
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eyecix JobSearch wp-jobsearch allows Reflected XSS.This issue affects JobSearch: from n/a through = 2.5.9...
CVE-2024-47385
CVE-2024-47385 is a stored XSS in the WordPress plugin “Essential Blocks for Gutenberg” (WPDeveloper). Public details indicate the vulnerability affects versions up to and including 4.8.4; exploitation is via improper neutralization of input during web page generation. The patch is available in v...
CVE-2024-47626
CVE-2024-47626 : In the WordPress plugin RomethemeKit For Elementor (affected versions:
CVE-2024-8608 Stored XSS in Oceanic Software's ValeApp
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Oceanic Software ValeApp allows Stored XSS. This issue affects ValeApp: before v2.0.0...
Telerik UI 命令注入漏洞
Telerik UI is a suite of UI User Interface controls for application development from Telerik Bulgaria. A command injection vulnerability exists in Telerik UI 2024 Q3 2024.3.806 and earlier versions, which stems from a command injection attack that can be performed via improper neutralization of...
Alisonic Sibylla
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Alisonic Equipment: Sibylla Vulnerability: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' 2. RISK EVALUATION Successful exploitation of this vulnerability...
CVE-2024-7835 Reflected XSS in Exnet Informatics Software's Ferry Reservation System
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Exnet Informatics Software Ferry Reservation System allows Reflected XSS. This issue affects Ferry Reservation System: before 240805-002...
CVE-2024-5959 Stored XSS in Eliz Software's Panel
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Eliz Software Panel allows Stored XSS. This issue affects Panel: before v2.3.24...
CVE-2024-5959 Stored XSS in Eliz Software's Panel
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Eliz Software Panel allows Stored XSS. This issue affects Panel: before v2.3.24...
CVE-2024-43995
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in sonalsinha21 Posterity allows Stored XSS.This issue affects Posterity: from n/a through 3.6...
CVE-2024-43987
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in wayneconnor Sliding Door allows Stored XSS.This issue affects Sliding Door: from n/a through 3.6...
CVE-2024-43971
The Sunshine Photo Cart WordPress plugin, in versions 3.2.5 and earlier , is vulnerable to Reflected Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. Attackers can exploit this by crafting malicious input to execute scripts in users' browsers, potenti...
CVE-2024-45451
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cryout-creations Roseta roseta allows Stored XSS.This issue affects Roseta: from n/a through = 1.3.0...
CVE-2024-44004
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows SQL Injection. This issue affects WPCargo Track & Trace: before 8.0.4...
CVE-2024-44003
CVE-2024-44003 describes a Reflected Cross‑Site Scripting vulnerability in the WordPress plugin Spice Starter Sites . Affected versions are
CVE-2024-44008 WordPress Geo Mashup plugin <= 1.13.12 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Stored XSS.This issue affects Geo Mashup: from n/a through = 1.13.12...
CVE-2024-38860
CVE-2024-38860 affects Checkmk before versions 2.3.0p16 and 2.2.0p34. The issue is improper neutralization of input that allows attackers to craft malicious links, facilitating phishing attacks. Impact is tied to web-facing link handling and error messaging. Remediation: upgrade to Checkmk 2.3.0p...
CVE-2024-38860 Reflected links in error message facilitate phishing attacks
Improper neutralization of input in Checkmk before versions 2.3.0p16 and 2.2.0p34 allows attackers to craft malicious links that can facilitate phishing attacks...
CVE-2024-2010 Reflected XSS in TE Informatics' V5 Software
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in TE Informatics V5 allows Reflected XSS. This issue affects V5: before 6.2...