CVE-2024-5062 Reflected XSS through survey redirect parameter in zenml-io/zenml

A reflected Cross-Site Scripting XSS vulnerability was identified in zenml-io/zenml version 0.57.1. The vulnerability exists due to improper neutralization of input during web page generation, specifically within the survey redirect parameter. This flaw allows an attacker to redirect users to a...

ZenML Cross-Site Scripting Vulnerability

ZenML is an extensible open source MLOps framework for creating portable, production-ready machine learning pipelines. A cross-site scripting vulnerability exists in ZenML version 0.57.1, which stems from improper neutralization of input during web page generation, and a Reflective Cross-Site...

VulnCheck KEV: CVE-2024-37433

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EverPress Mailster mailster.This issue affects Mailster: from n/a through = 4.0.9...

MOXA OnCell G3470A-LTE Command Injection Vulnerability

MOXA OnCell G3470A-LTE is a series of cellular gateway/router from MOXA China. A command injection vulnerability exists in MOXA OnCell G3470A-LTE v1.7.7 and earlier firmware versions, which stems from the lack of a neutralization input in the Web Key Upload function, and can be exploited by an...

BIT-WORDPRESS-MULTISITE-2024-31111 WordPress Core < 6.5.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Automattic WordPress allows Stored XSS.This issue affects WordPress: from 6.5 through 6.5.4, from 6.4 through 6.4.4, from 6.3 through 6.3.4, from 6.2 through 6.2.5, from 6.1 through 6.1.6,...

CVE-2024-37248

CVE-2024-37248 (Anima theme, CryoutCreations) stores user-supplied input via the Anima theme’s web-page generation process, leading to a Stored Cross-Site Scripting (XSS) condition. Affected software: CryoutCreations Anima, version range from n/a through 1.4.1. Public data lists the vulnerability...

UBUNTU-CVE-2024-31111

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Automattic WordPress allows Stored XSS.This issue affects WordPress: from 6.5 through 6.5.4, from 6.4 through 6.4.4, from 6.3 through 6.3.4, from 6.2 through 6.2.5, from 6.1 through 6.1.6,...

WordPress Cross-Site Scripting Vulnerability

WordPress is a suite of blogging platforms developed in the PHP language by the WordPress Foundation. The platform supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress that stems from improper input neutralization during page generation...

CVE-2024-35766

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ollybach WPPizza allows Reflected XSS.This issue affects WPPizza: from n/a through 3.18.13...

CVE-2024-35761

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in vCita Online Booking & Scheduling Calendar for WordPress by vcita allows Stored XSS.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through 4.4.0...

CVE-2024-35764

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through = 4.4.4...

CVE-2024-35758

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Theme Horse Interface allows Stored XSS.This issue affects Interface: from n/a through 3.1.0...

CVE-2024-35762

CVE-2024-35762 is a Stored Cross-Site Scripting issue in Cryout Creations Serious Slider for WordPress, affecting Serious Slider 1.2.4 and earlier. Root cause: improper neutralization of input during web page generation. Impact: stored XSS could enable an attacker with Editor access to inject scr...

PT-2024-4285 · Moxa · Oncell G3470A-Lte Series

Name of the Vulnerable Software and Affected Versions: OnCell G3470A-LTE Series firmware versions v1.7.7 and prior Description: The issue is related to a lack of neutralized inputs in the web key upload function, allowing an attacker to modify intended commands sent to target functions. This coul...

CVE-2024-6179

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSign CMS: from 4.1.3 before 4.3.1...

CVE-2024-6179

LG SuperSign CMS is affected by a Reflected XSS due to improper input neutralization during web page generation. Affected versions are 4.1.3 up to 4.3.0 (before 4.3.1). Root cause: insufficient input neutralization in the page generation flow. Remediation: upgrade to 4.3.1 or later as indicated b...

CVE-2024-6178 XSS vulnerability in LG SuperSign CMS

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSign CMS: from 4.1.3 before 4.3.1...

CVE-2024-6177 XSS vulnerability in LG SuperSign CMS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSign CMS: from 4.1.3 before 4.3.1...

LG SuperSign CMS Cross-Site Scripting Vulnerability

LG SuperSign CMS is a content management software solution optimized for LG webOS kanbanban from Luckin LG Korea. A cross-site scripting vulnerability exists in LG SuperSign CMS versions prior to 4.1.3 through 4.3.1, which stems from the presence of improper input neutralization during web page...

LG SuperSign CMS Cross-Site Scripting Vulnerability

LG SuperSign CMS is a content management software solution optimized for LG webOS kanbanban from Luckin LG Korea. A cross-site scripting vulnerability exists in LG SuperSign CMS versions 4.1.3 through 4.3.1, which stems from improper input neutralization during web page generation, resulting in...