2904 matches found
Malicious code in n-http-proxy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c13801d43d60af89b56b44fb645f8cd6e571abf340332c2d4031b29aab946043 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10989 Malicious code in n-http-proxy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c13801d43d60af89b56b44fb645f8cd6e571abf340332c2d4031b29aab946043 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-52471
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in petesheppard84 Extensions for Elementor allows Reflected XSS.This issue affects Extensions for Elementor: from n/a through 2.0.37...
CVE-2024-51846
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michael Simpson Community Yard Sale community-yard-sale allows Stored XSS.This issue affects Community Yard Sale: from n/a through = 1.1.11...
CVE-2024-51648
Cross-Site Request Forgery CSRF vulnerability in hands01 e-shops e-shops-cart2 allows Reflected XSS.This issue affects e-shops: from n/a through = 1.0.3...
CVE-2024-51637
Cross-Site Request Forgery CSRF vulnerability in sroyalty Admin SMS Alert admin-sms-alert allows Stored XSS.This issue affects Admin SMS Alert: from n/a through = 1.1.0...
CVE-2024-51686
CVE-2024-51686 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Manage User Columns, affecting versions up to 1.0.5. The issue enables CSRF against authenticated users. A fix exists (patched) and remediation is to update to the patched version or apply the vendor fix w...
CVE-2024-50534
CVE-2024-50534 – WordPress World Prayer Time plugin
CVE-2024-51635
CVE-2024-51635 is a CSRF-to-Stored-XSS vulnerability in the WordPress plugin While Loading (versions
CVE-2024-51637
CVE-2024-51637 : WordPress WordPress Admin SMS Alert plugin (versions
CVE-2024-51617
CVE-2024-51617 (Clyp WordPress plugin
CVE-2024-51835
CVE-2024-51835 is a Stored XSS vulnerability in OpenCart Product Display (WordPress plugin “opencart-product-display” by Ajinkya N). The connected data indicates the flaw arises from improper input neutralization during web page generation, enabling stored cross-site scripting. Affected software ...
CVE-2024-51835 WordPress OpenCart Product Display plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ajinkyanahar OpenCart Product Display opencart-product-display allows Stored XSS.This issue affects OpenCart Product Display: from n/a through = 1.0...
CVE-2024-51836 WordPress Wezido plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in teconce Wezido wezido-elementor-addon-based-on-easy-digital-downloads allows DOM-Based XSS.This issue affects Wezido: from n/a through = 1.2...
CVE-2024-51851
CVE-2024-51851 is a cross-site scripting vulnerability in the WordPress plugin Best Bootstrap Widgets for Elementor (versions up to 1.0). The issue stems from improper input neutralization during web page generation, enabling DOM-based XSS. The connected sources indicate the plugin is affected up...
CVE-2024-51853 WordPress Faltu Testimonial Rotator plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alberuni Azad. Faltu Testimonial Rotator faltu-testimonial-rotator allows DOM-Based XSS.This issue affects Faltu Testimonial Rotator: from n/a through = 1.0.0...
CVE-2024-51863
CVE-2024-51863 : Stored XSS in WordPress PF Timer plugin (PF Timer,
CVE-2024-51864
CVE-2024-51864: WordPress Shortcode Collection plugin contains a Stored XSS due to improper input neutralization during page generation. Affected versions: Shortcode Collection
CVE-2024-51879
CVE-2024-51879 is a Stored XSS in the WordPress Text Advertisements plugin by Arash Heidari, affecting versions n/a through 2.1. The vulnerability arises from improper input neutralization during web page generation. CVSS 3.1 base score 6.5 (Medium); exploitation status not indicated in the provi...