CVE-2024-32578: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 10Web Slider by 10Web allows Reflected XSS.This issue affects Slider by 10Web: from n/a through 1.2.54...

CVE-2024-32595: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mat Bao Corp WP Helper Premium allows Reflected XSS.This issue affects WP Helper Premium: from n/a before 4.6.0...

CVE-2024-32602: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in OnTheGoSystems WooCommerce Multilingual & Multicurrency.This issue affects WooCommerce Multilingual & Multicurrency: from n/a through 5.3.3.1...

CVE-2024-32562: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VIICTORY MEDIA LLC Z Y N I T H allows Stored XSS.This issue affects Z Y N I T H: from n/a through 7.4.9...

CVE-2022-47151

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1...

CVE-2024-32531

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Everest themes GuCherry Blog allows Reflected XSS.This issue affects GuCherry Blog: from n/a through 1.1.8...

CVE-2024-32527

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jotform Jotform Online Forms allows Stored XSS.This issue affects Jotform Online Forms: from n/a through 1.3.1...

CVE-2024-32457

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in The CSSIgniter Team Elements Plus! allows Stored XSS.This issue affects Elements Plus!: from n/a through 2.16.3...

CVE-2024-32508

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in deTheme DethemeKit For Elementor allows Stored XSS.This issue affects DethemeKit For Elementor: from n/a through 2.0.2...

CVE-2024-32508

DethemeKit For Elementor (CVE-2024-32508) has a Stored XSS in the plugin’s web page generation due to improper input neutralization; affected versions are up to 2.0.2 and a fix was released in 2.0.3. Remediation: upgrade to 2.0.3 or later.

CVE-2024-32527

CVE-2024-32527 affects the Jotform Online Forms WordPress plugin (versions up to and including 1.3.1). The issue is Stored Cross‑Site Scripting caused by insufficient input sanitization and output escaping in shortcode attributes, exploitable by authenticated users with contributor level access a...

CVE-2024-32531

CVE-2024-32531 affects the GuCherry Blog WordPress theme (GuCherry Blog) with a Reflected XSS vulnerability in web page generation. The issue affects GuCherry Blog versions from n/a up to and including 1.1.8. The connected Wordfence entry explicitly notes Reflected XSS with Unpatched status; no r...

CVE-2024-32535

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jojaba Access Category Password allows Reflected XSS.This issue affects Access Category Password: from n/a through 1.5.1...

CVE-2024-32539

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JoomUnited WP File Download Light allows Stored XSS.This issue affects WP File Download Light: from n/a through 1.3.3...

CVE-2024-32539

Technical details about CVE-2024-32539 are not provided in the connected documents. Public information here is limited to the basic description; monitor for updates.

CVE-2024-32529: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Momoyoga Yoga Schedule Momoyoga allows Stored XSS.This issue affects Yoga Schedule Momoyoga: from n/a through 2.7.0...

CVE-2024-32545: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Canva Canva – Design beautiful blog graphics allows Reflected XSS.This issue affects Canva – Design beautiful blog graphics: from n/a through 1.2.4...

CVE-2024-32528: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Seerox WP Dynamic Keywords Injector allows Reflected XSS.This issue affects WP Dynamic Keywords Injector: from n/a through 2.3.18...

CVE-2024-32539: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JoomUnited WP File Download Light allows Stored XSS.This issue affects WP File Download Light: from n/a through 1.3.3...

CVE-2024-32456: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EnvoThemes Envo Extra allows Stored XSS.This issue affects Envo Extra: from n/a through 1.8.11...