WordPress plugin Black Widgets For Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

PT-2024-34910 · Woocommerce · Friendstore For Woocommerce

Name of the Vulnerable Software and Affected Versions: FriendStore for WooCommerce versions 1.4.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks...

PT-2024-34736 · Unknown · Glopium Studio Курс Валют Uah

Name of the Vulnerable Software and Affected Versions: Glopium Studio Курс валют UAH versions n/a through 2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This is a Stored XSS vulnerability, which means...

WordPress plugin Header Footer Composer for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

PT-2024-34852 · James Bruner · Wp Mmenu Lite

Name of the Vulnerable Software and Affected Versions: James Bruner WP MMenu Lite versions 1.0.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: Fo...

PT-2024-34756 · Unknown · Andrew Connell Trademe Widgets

Name of the Vulnerable Software and Affected Versions: Andrew Connell TradeMe widgets versions n/a through 1.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS in Andrew Connell...

PT-2024-34859 · Visser · Visser Labs Jigoshop – Store Toolkit

Name of the Vulnerable Software and Affected Versions: Visser Labs Jigoshop – Store Toolkit versions 1.4.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS...

WordPress plugin Master Bar 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2024-34838 · Aryan Duntley · Admin Amplify

Name of the Vulnerable Software and Affected Versions: Aryan Duntley Admin Amplify versions 1.3.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: F...

PT-2024-34845 · Unknown · Luis Rock Master Bar

Name of the Vulnerable Software and Affected Versions: Luis Rock Master Bar versions 1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows Reflected XSS, which can be exploited by an...

WordPress plugin UW Freelancer 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-34818

Name of the Vulnerable Software and Affected Versions HasThemes HT Politic versions n/a through 2.4.4 Description The issue is related to improper neutralization of input during web page generation, allowing DOM-Based XSS. This is a type of Cross-site Scripting vulnerability. Recommendations For...

PT-2024-34751 · Elsner Technologies Pvt. · Emoji Shortcode

Name of the Vulnerable Software and Affected Versions: Elsner Technologies Pvt. Ltd. Emoji Shortcode versions n/a through 1.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS in t...

PT-2024-16453 · Unknown · Wojciech Borowicz Conversion Helper

Name of the Vulnerable Software and Affected Versions: Wojciech Borowicz Conversion Helper versions n/a through 1.12 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS...

PT-2024-34765 · Unknown · Reza Sh Download-Mirror-Counter

Name of the Vulnerable Software and Affected Versions: Reza Sh Download-Mirror-Counter versions 1.1 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2024-34771 · Unknown · Ezyonlinebookings Online Booking System Widget

Name of the Vulnerable Software and Affected Versions: EzyOnlineBookings Online Booking System Widget versions 1.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for DOM-Based XSS...

PT-2024-34846 · Unknown · Buooy Sticky Header

Name of the Vulnerable Software and Affected Versions: Buooy Sticky Header versions through 0.5.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For versions...

WordPress plugin Buooy Sticky Header 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress plugin Delisho 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-34854 · WordPress · Wp Visual Adverts

Name of the Vulnerable Software and Affected Versions: WP Visual Adverts versions through 2.3.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. Recommendations: For versions throu...