CVE-2024-43964

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Michael Leithold DSGVO All in one for WP allows Stored XSS.This issue affects DSGVO All in one for WP: from n/a through 4.5...

CVE-2024-43961

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in azurecurve azurecurve Toggle Show/Hide allows Stored XSS.This issue affects azurecurve Toggle Show/Hide: from n/a through 2.1.3...

CVE-2024-43951

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CryoutCreations Tempera allows Stored XSS.This issue affects Tempera: from n/a through 1.8.2...

CVE-2024-43958

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Gianni Porto IntoTheDark allows Reflected XSS.This issue affects IntoTheDark: from n/a through 1.0.5...

CVE-2024-43936

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPDeveloper EmbedPress allows Stored XSS.This issue affects EmbedPress: from n/a through 4.0.8...

CVE-2024-43920

CVE-2024-43920 (Jegstudio Gutenverse) is a Stored XSS in Gutenverse (Authenticated via Contributor+) affecting Gutenverse releases up to 1.9.4. The issue arises from improper neutralization of user input during web page generation, enabling attacker-supplied content to execute in a victim’s brows...

CVE-2024-43934

CVE-2024-43934 affects the Collapsing Archives WordPress plugin. It is a Stored XSS caused by improper neutralization of input during web page generation, affecting versions up to 3.0.5 (n/a to 3.0.5). Remediation: update to the patched version 3.0.5.

CVE-2024-43935 WordPress WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) plugin <= 1.6.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WP Delicious Delicious Recipes – WordPress Recipe Plugin allows Stored XSS.This issue affects Delicious Recipes – WordPress Recipe Plugin: from n/a through 1.6.7...

CVE-2024-43950

CVE-2024-43950 affects the Brickscore WordPress plugin. It reports stored XSS due to improper input neutralization during web page generation, with Brickscore versions n/a through 1.4.2.5 affected. The vulnerability is currently listed as Unpatched by the sources in the Connected documents; no pu...

CVE-2024-43951

CVE-2024-43951 describes a Stored Cross-Site Scripting (XSS) flaw in CryoutCreations Tempera (WordPress theme). Affected versions are Tempera from n/a through 1.8.2. The vulnerability is due to improper neutralization of user input during web page generation, enabling stored XSS. Public reference...

CVE-2024-43952

CVE-2024-43952 is a Stored XSS in CryoutCreations Esotera theme (WordPress), affecting Esotera versions up to 1.2.5.1. Root cause: improper input neutralization during web page generation. Wordfence notes patching status; remediation is to update to a patched release. No exploitation details are ...

CVE-2024-43958

CVE-2024-43958 describes a Reflected XSS in the IntoTheDark WordPress theme/plugin by Gianni Porto. Publicly documented as impacting IntoTheDark: from n/a through 1.0.5, due to Improper Neutralization of Input During Web Page Generation. The connected Red Hat and ENISA entries corroborate the CVE...

CVE-2024-43960

CVE-2024-43960: Stored XSS in Web and WooCommerce Addons for WPBakery Builder (WPBakery Page Builder) due to improper input neutralization. Affected: Web and WooCommerce Addons for WPBakery Builder, versions n/a–1.4.6. Impact: stored cross-site scripting; specifics on exploit vectors and patch st...

CVE-2024-43963

CVE-2024-43963 is a reflected XSS in the YellowPencil Visual CSS Style Editor for WordPress (WaspThemes), allowing input neutralization bypass during HTML generation for versions up to 7.6.1. The issue is confirmed in multiple sources and is classified as a Web page generation input handling flaw...

CVE-2024-43964

CVE-2024-43964 is a stored cross-site scripting vulnerability in the WordPress plugin DSGVO All in one for WP . According to the provided references, the issue arises from improper neutralization of input during web page generation, allowing stored XSS. Affected versions are listed as from n/a th...

CVE-2024-43986

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MagePeople Team Taxi Booking Manager for WooCommerce allows Stored XSS.This issue affects Taxi Booking Manager for WooCommerce: through 1.0.9...

WordPress plugin Brickscore 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

WordPress plugin Easy Digital Downloads SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

WordPress plugin DSGVO All in one for WP 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2024-7269

Improper Neutralization of Input During Web Page Generation vulnerability in "Update of Personal Details" form in ConnX ESP HR Management allows Stored XSS attack. An attacker might inject a script to be run in user's browser. After multiple attempts to contact the vendor we did not receive any...