PT-2024-27858 · Mbe Eship · Mbe Eship

Name of the Vulnerable Software and Affected Versions: MBE eShip versions n/a through 2.1.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For versions n/a...

PT-2024-27823 · WordPress · Coneblog – Wordpress Blog Widgets

Name of the Vulnerable Software and Affected Versions: ConeBlog – WordPress Blog Widgets versions 1.4.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...

PT-2024-27863 · Unknown · Meks Smart Author Widget

Name of the Vulnerable Software and Affected Versions: Meks Smart Author Widget versions 1.1.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations:...

PT-2024-28377 · Unknown · Calculator-Boilerplate

Name of the Vulnerable Software and Affected Versions: calculator-boilerplate version 1.0 Description: The issue is related to a remote code execution RCE vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload injected into the input field. The...

PT-2024-27168 · Mapos · Mapos

Name of the Vulnerable Software and Affected Versions: MAP-OS versions 4.45.0 and earlier Description: The issue allows malicious users to insert a malicious payload into the Client Name input, resulting in unauthorized script execution on the administrator and employee dashboards when a service...

PT-2024-26645 · Thimpress · Thimpress Eduma

Name of the Vulnerable Software and Affected Versions: ThimPress Eduma versions n/a through 5.4.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. Recommendations: For versions n/a...

PT-2024-26635 · Unknown · Link Library

Name of the Vulnerable Software and Affected Versions: Link Library versions n/a through 7.6.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For versions n/a...

PT-2024-26693 · Theme Freesia · Theme Freesia Pixgraphy

Name of the Vulnerable Software and Affected Versions: Theme Freesia Pixgraphy versions 1.3.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS. This means that an attacker...

PT-2024-26644 · WordPress · Fahad Mahmood Wp Docs

Name of the Vulnerable Software and Affected Versions: Fahad Mahmood WP Docs versions n/a through 2.1.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For...

PT-2024-26668 · Tribulant · Tribulant Newsletters

Name of the Vulnerable Software and Affected Versions: Tribulant Newsletters versions 4.9.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For...

PT-2024-26684 · Yith · Yith Custom Login

Name of the Vulnerable Software and Affected Versions: YITH Custom Login versions 1.7.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For YI...

PT-2024-26707 · Unknown · Templatesnext Onepager

Name of the Vulnerable Software and Affected Versions: TemplatesNext OnePager versions 1.3.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS in TemplatesNext OnePager...

PT-2024-29418 · Lunary · Lunary

Name of the Vulnerable Software and Affected Versions: lunary-ai/lunary version 1.2.10 Description: A Regular Expression Denial of Service ReDoS issue exists, allowing an attacker to significantly impact the application's response time and potentially render it non-functional by manipulating...

PT-2024-25866 · Nobita · Nobita

Name of the Vulnerable Software and Affected Versions: Nobita versions prior to 1.600 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS. This could potentially compromise web safety...

PT-2024-25195 · Sourcecodester · Sourcecodester Computer Laboratory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Laboratory Management System version 1.0 Description: The issue is related to Cross Site Scripting XSS via the Middle Name parameter in the Create User function. This allows for potential malicious script injection...

PT-2024-25194 · Sourcecodester · Sourcecodester Product Show Room

Name of the Vulnerable Software and Affected Versions: SourceCodester Product Show Room version 1.0 Description: The issue is related to Cross Site Scripting XSS via the Last Name field under Add Users. This allows for potential malicious script injection. No information is provided about the...

PT-2024-25404 · Unknown · Kailey Lampert Advanced Most Recent Posts Mod

Name of the Vulnerable Software and Affected Versions: Kailey Lampert Advanced Most Recent Posts Mod versions through 1.6.5.2 Description: The issue affects the Kailey Lampert Advanced Most Recent Posts Mod, allowing Stored XSS due to improper neutralization of input during web page generation...

PT-2024-25399 · Accessally · Popupally

Name of the Vulnerable Software and Affected Versions: PopupAlly versions n/a through 2.1.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS in AccessAlly PopupAlly. Recommendations: For...

PT-2024-24668 · Unknown · What'S New Generator

Name of the Vulnerable Software and Affected Versions: What's New Generator versions n/a through 2.0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For...

PT-2024-22848 · Funboot · Funboot

Name of the Vulnerable Software and Affected Versions: funboot version 1.1 Description: The issue is related to Cross Site Scripting XSS via the title field in the "create a message" endpoint. This allows for potential malicious script injection. Recommendations: For funboot version 1.1, as a...