CVE-2024-51609

CVE-2024-51609 describes a stored XSS in the WordPress plugin Emoji Shortcode (versions n/a–1.0.0) due to improper input neutralization during web page generation. Multiple connected sources confirm the vulnerability in Emoji Shortcode, with advisories indicating the issue affects versions up to ...

CVE-2024-51612

CVE-2024-51612 : Stored XSS in WordPress plugin “Reftagger Shortcode” (versions n/a–1.1) due to improper input neutralization during web page generation. Public docs confirm this vulnerability affects the Reftagger Shortcode plugin up to v1.1; exploitation details are not provided, and no patch/v...

CVE-2024-51706

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Upeksha Wisidagama UW Freelancer uw-freelancer allows Reflected XSS.This issue affects UW Freelancer: from n/a through = 0.1...

CVE-2024-51697

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Doofinder Doofinder doofinder allows Reflected XSS.This issue affects Doofinder: from n/a through = 0.5.4...

CVE-2024-51663

CVE-2024-51663 is an XSS vulnerability in the WordPress plugin Bricksable for Bricks Builder (affected: Bricksable for Bricks Builder,

CVE-2024-51676

CVE-2024-51676 is a Cross-Site Scripting (DOM-based XSS) vulnerability in the WordPress plugin Delisho (dr-widgets-blocks). It affects Delisho versions up to and including 1.0.6 and arises from improper input neutralization during web page generation. The issue has a CVSS v3.1 base score of 6.5 (...

CVE-2024-51713

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TRe Technology And Research S.r.l. HQ60 Fidelity Card hq60-fidelity-card allows Reflected XSS.This issue affects HQ60 Fidelity Card: from n/a through = 1.8...

CVE-2024-51708

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Narnoo Narnoo Commerce Manager narnoo-commerce-manager allows Reflected XSS.This issue affects Narnoo Commerce Manager: from n/a through = 1.6.0...

CVE-2024-51703

CVE-2024-51703 represents a reflected XSS in WordPress plugin WP-Basics (Genethick WP-Basics). Root cause: improper neutralization of input during web page generation. Affects WP-Basics up to version 2.0; CVSS 3.1/7.1 (HIGH). Connected Red Hat advisory confirms the issue; no public exploit or rem...

CVE-2024-51708 WordPress Narnoo Commerce Manager plugin <= 1.6.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Narnoo Narnoo Commerce Manager narnoo-commerce-manager allows Reflected XSS.This issue affects Narnoo Commerce Manager: from n/a through = 1.6.0...

CVE-2024-51708 WordPress Narnoo Commerce Manager plugin <= 1.6.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Narnoo Narnoo Commerce Manager narnoo-commerce-manager allows Reflected XSS.This issue affects Narnoo Commerce Manager: from n/a through = 1.6.0...

CVE-2024-51714

CVE-2024-51714 describes a reflected Cross-Site Scripting vulnerability in the WordPress plugin/theme component “User Password Reset.” The issue arises from improper neutralization of user-supplied input during web page generation, allowing an attacker to craft a URL that, when visited by a victi...

CVE-2024-51718

CVE-2024-51718 is a Reflected XSS in Simple Modal (Improp­er Input Neutralization during Web Page Generation). Affected: Simple Modal versions up to 0.3.3. Root cause: improper neutralization of user input leading to script execution when pages generate content that incorporates untrusted input. ...

CVE-2024-51779

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jason Coleman Don't Break The Code dont-break-the-code allows Reflected XSS.This issue affects Don't Break The Code: from n/a through = .3.1...

CVE-2024-51778

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tevya Satisfaction Reports from Help Scout happiness-reports-for-help-scout allows Reflected XSS.This issue affects Satisfaction Reports from Help Scout: from n/a through = 2.0.3...

CVE-2024-51762

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Chris Gipple PropertyShift propertyshift allows Reflected XSS.This issue affects PropertyShift: from n/a through = 1.0.0...

CVE-2024-51762

CVE-2024-51762 is a Reflected XSS in PropertyShift (Nightshift Creative) WordPress plugin, affected versions are up to 1.0.0. The vulnerability is triggered by input that is not properly neutralized during web page generation, enabling Reflected XSS. Base metrics show a high severity (CVSS 3.1: 7...

CVE-2024-51776

CVE-2024-51776 is a Reflected XSS in the Daily Image WordPress plugin. The issue stems from improper input neutralization during web page generation, affecting Daily Image versions from n/a through 1.0. The connected Red Hat advisory confirms the vulnerability context but does not provide remedia...

CVE-2024-51780 WordPress eewee admin custom plugin <= 1.8.2.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eewee eewee admin custom eewee-admincustom allows Reflected XSS.This issue affects eewee admin custom: from n/a through = 1.8.2.4...

CVE-2024-51786

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bestweblayout Realty by BestWebSoft realty allows Stored XSS.This issue affects Realty by BestWebSoft: from n/a through = 1.1.5...