6639 matches found
PT-2024-25841 · Unknown · Propertyhive
Name of the Vulnerable Software and Affected Versions: PropertyHive versions 2.0.10 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject malicious...
CVE-2023-41213
D-Link DAP-1325 setDhcpAssignRangeUpdate lanipaddr Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this...
PT-2024-25559 · Unknown · Gwp-Histats
Name of the Vulnerable Software and Affected Versions: GWP-Histats versions n/a through 1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject malicio...
WordPress plugin Royal Elementor Addons and Templates 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-25586 · Unknown · Atanas Yonkov Pliska
Name of the Vulnerable Software and Affected Versions: Atanas Yonkov Pliska versions 0.3.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For...
PT-2024-31131 · Unknown · Mr Digital Simple Image Popup
Name of the Vulnerable Software and Affected Versions: Mr Digital Simple Image Popup versions n/a through 2.4.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can injec...
Stack-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow due to improper handling of certain inputs in the element.h component. An attacker can trigger this vulnerability by supplying specially crafted input to the application. Remediation Upgrade lunasvg to versio...
CVE-2024-33633
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Piotnet Piotnet Addons For Elementor Pro allows Reflected XSS.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17...
CVE-2024-33562
CVE-2024-33562 describes a Reflected XSS in 8theme XStore (WordPress theme/plugin). Affected versions are listed as XStore: from n/a through 9.3.5 . The connected documents provide the vulnerability type and affected range but do not include a confirmed patch or remediation in the provided materi...
PT-2024-25408
Name of the Vulnerable Software and Affected Versions wzy Media Recencio Book Reviews versions 1.66.0 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means an attacker can inject...
PT-2024-25307 · Themegrill · Themegrill Colornews
Name of the Vulnerable Software and Affected Versions: ThemeGrill ColorNews versions 1.2.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...
CVE-2024-33639
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AccessAlly PopupAlly allows Stored XSS.This issue affects PopupAlly: from n/a through 2.1.1...
CVE-2024-33639
CVE-2024-33639 affects AccessAlly PopupAlly for WordPress, enabling Stored XSS via improper neutralization of input during web page generation. Affected: PopupAlly up to version 2.1.1. Root cause aligned with input handling in page generation; remediation details are not provided in the connected...
PT-2024-25451 · Themencode · Fan Page Widget
Name of the Vulnerable Software and Affected Versions: Fan Page Widget by ThemeNcode versions n/a through 2.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject...
WordPress plugin Meks ThemeForest Smart Widget 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin Me...
WordPress plugin Advanced Post List 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...
WordPress plugin PopupAlly 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...
WordPress plugin Fan Page Widget by ThemeNcode 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin Fan Pag...
USN-6751-1 zabbix vulnerabilities
It was discovered that Zabbix incorrectly handled input data in the discovery and graphs pages. A remote authenticated attacker could possibly use this issue to perform reflected cross-site scripting XSS attacks. CVE-2022-35229, CVE-2022-35230...