PT-2024-24704 · Unknown · Bowo Debug Log Manager

Name of the Vulnerable Software and Affected Versions: Bowo Debug Log Manager versions through 2.3.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means an attacker can inject malicious scripts into the website,...

PT-2024-24675 · Knight · Knight Lab Timeline

Name of the Vulnerable Software and Affected Versions: Knight Lab Timeline versions 3.9.3.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For...

PT-2024-24716 · Unknown · Attesa Extra

Name of the Vulnerable Software and Affected Versions: Attesa Extra versions 1.3.9 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

CVE-2024-32510

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Loopus WP Cost Estimation & Payment Forms Builder allows Reflected XSS.This issue affects WP Cost Estimation & Payment Forms Builder: from n/a through 10.1.75...

CVE-2024-32526

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Flector Easy Textillate allows Stored XSS.This issue affects Easy Textillate: from n/a through 2.02...

CVE-2024-32505

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Roxnor ElementsKit Elementor addons Lite elementskit-lite.This issue affects ElementsKit Elementor addons Lite: from n/a through = 3.0.6...

CVE-2024-32510

CVE-2024-32510 is a reflected XSS in WP Cost Estimation & Payment Forms Builder (WordPress). It arises from improper input neutralization during web page generation, allowing reflected script execution. Affected: WP Cost Estimation & Payment Forms Builder: from n/a through 10.1.75. CVSS v3.1 base...

PT-2024-24664 · Netgsm · Netgsm

Name of the Vulnerable Software and Affected Versions: Netgsm versions n/a through 2.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can inject malicious...

CVE-2023-40000

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through 5.7...

CVE-2024-32453

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POEditor allows Stored XSS.This issue affects POEditor: from n/a through 0.9.8...

CVE-2024-32138

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in KaizenCoders Short URL allows Reflected XSS.This issue affects Short URL: from n/a through 1.6.8...

CVE-2024-2279 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.7 to 16.8.6 all versions starting from 16.9 before 16.9.4, all versions starting from 16.10 before 16.10.2. Using the autocomplete for issues references feature a crafted payload may lead to a stored XSS, allowin...

CVE-2024-31925

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FAKTOR VIER F4 Improvements allows Stored XSS.This issue affects F4 Improvements: from n/a through 1.8.0...

CVE-2024-31928

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Darko Top Bar allows Stored XSS.This issue affects Top Bar: from n/a through 3.0.5...

CVE-2024-31387

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Popup LikeBox Team Popup Like box allows Stored XSS.This issue affects Popup Like box: from n/a through 3.7.2...

CVE-2024-31361 WordPress bunny.net plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bunny.Net allows Stored XSS.This issue affects bunny.Net: from n/a through 2.0.1...

CVE-2024-31926

CVE-2024-31926 is a stored XSS in BracketSpace Advanced Cron Manager – debug & control. Affected: Advanced Cron Manager – debug & control versions up to 2.5.2. Root cause: improper neutralization of input during web page generation. Impact: stored cross-site scripting. Remediation: patch/update t...

CVE-2024-31931

CVE-2024-31931 affects the Save as Image Plugin by Pdfcrowd for WordPress. It is a Stored XSS due to improper input neutralization during web page generation, exploitable by an authenticated admin. Affected versions: up to 3.2.1 (authenticated/ admin access required). A patch has been released (p...

CVE-2024-27992

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Link Whisper Link Whisper Free allows Reflected XSS.This issue affects Link Whisper Free: from n/a through 0.6.8...

ROS-20240409-11

Vulnerability in the WatchAnalytics extension of the hypertext environment implementation software tool MediaWiki is related to XSS exploitation using the Special:PageStatistics page parameter. Exploitation The exploitation of the vulnerability could allow a remote attacker to perform cross-site...