CVE-2024-49639

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Edward Stoever Monitor.chat monitor-chat allows Reflected XSS.This issue affects Monitor.chat: from n/a through = 1.1.1...

CVE-2024-49635

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in manjurul.cis Banner Slider banner-slider allows Reflected XSS.This issue affects Banner Slider: from n/a through = 2.1...

CVE-2024-49640 WordPress ACL Floating Cart for WooCommerce plugin <= 0.9 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AmaderCode Lab ACL Floating Cart for WooCommerce acl-floating-cart-for-woocommerce allows Reflected XSS.This issue affects ACL Floating Cart for WooCommerce: from n/a through = 0.9...

CVE-2024-49665

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Web Bricks Web Bricks Addons for Elementor allows Stored XSS.This issue affects Web Bricks Addons for Elementor: from n/a through 1.1.1...

CVE-2024-49664

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in allows Reflected XSS.This issue affects chatplusjp: from n/a through 1.02...

CVE-2024-49659

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Rami Yushuvaev Coub allows Stored XSS.This issue affects Coub: from n/a through 1.4...

CVE-2024-49651

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Matt Royal WooCommerce Maintenance Mode allows Reflected XSS.This issue affects WooCommerce Maintenance Mode: from n/a through 2.0.1...

CVE-2024-49651

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matt Royal WooCommerce Maintenance Mode woocommerce-maintenance-mode allows Reflected XSS.This issue affects WooCommerce Maintenance Mode: from n/a through = 2.0.1...

CVE-2024-49646

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ioannup Code Generate code-generator allows Reflected XSS.This issue affects Code Generate: from n/a through = 1.0...

CVE-2024-49646

CVE-2024-49646 affects the WordPress plugin Code Generate (&lt;= 1.0). The vulnerability is a Reflected XSS caused by improper input neutralization during web page generation, enabling an attacker to inject script via unauthenticated input. The CVSSv3.1 base score is 7.1 (HIGH) with NETWORK attac...

CVE-2024-49647

CVE-2024-49647 : Reflected XSS in WordPress plugin Simple Custom Admin (

CVE-2024-49651 WordPress WooCommerce Maintenance Mode plugin <= 2.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matt Royal WooCommerce Maintenance Mode woocommerce-maintenance-mode allows Reflected XSS.This issue affects WooCommerce Maintenance Mode: from n/a through = 2.0.1...

CVE-2024-49659

CVE-2024-49659 affects the WordPress Coub plugin (versions

CVE-2024-49662

CVE-2024-49662 is a report of a Reflected XSS in the WordPress plugin Simple Load More (also listed as Webgensis Simple Load More), affecting versions

CVE-2024-50407

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bob Namaste! LMS namaste-lms allows Reflected XSS.This issue affects Namaste! LMS: from n/a through = 2.6.2...

CVE-2024-49667

CVE-2024-49667 is a stored XSS vulnerability in Local Business Addons For Elementor (NervyThemes) affecting versions up to 1.1.5 (also referred to as Local Business Addons For Elementor, formerly Waze Map). The issue arises from improper input neutralization during web page generation, allowing s...

CVE-2024-49678

CVE-2024-49678 is a reflected XSS in WordPress theme/plugin Js Paper (versions

CVE-2024-50418

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Time Slot Booking Time Slot timeslot allows DOM-Based XSS.This issue affects Time Slot: from n/a through = 1.3.6...

CVE-2024-50415

CVE-2024-50415 corresponds to a stored cross-site scripting (XSS) vulnerability in the WordPress plugin Ads.txt & App-ads.txt Manager for WordPress . The issue arises from improper input neutralization during web page generation, allowing stored XSS for versions up to and including 1.1.7.1. The v...

WordPress plugin BuddyPress Greeting Message 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...