8893 matches found
CVE-2024-37433
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EverPress Mailster mailster.This issue affects Mailster: from n/a through = 4.0.9...
CVE-2024-37428
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Themesgrove WidgetKit allows Stored XSS.This issue affects WidgetKit: from n/a through 2.5.0...
CVE-2024-37416
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus allows Reflected XSS.This issue affects WP Photo Album Plus: from n/a through 8.8.00.002...
CVE-2024-37428
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Themesgrove WidgetKit allows Stored XSS.This issue affects WidgetKit: from n/a through 2.5.0...
CVE-2024-37275
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in NextScripts allows Reflected XSS.This issue affects NextScripts: from n/a through 4.4.6...
CVE-2024-37271
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Michael Nelson Print My Blog allows Stored XSS.This issue affects Print My Blog: from n/a through 3.27.0...
CVE-2024-37259
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WP Extended The Ultimate WordPress Toolkit – WP Extended allows Reflected XSS.This issue affects The Ultimate WordPress Toolkit – WP Extended: from n/a through 2.4.7...
CVE-2024-37259
CVE-2024-37259 affects The Ultimate WordPress Toolkit – WP Extended (WP Extended) plugin. Public sources describe Cross-Site Scripting (XSS) in WP Extended up to version 2.4.7, with varying classifications across sources: the NVD entry cites Reflected XSS, while other connected templates discuss ...
PT-2024-27299 · Elegant Themes · Elegant Themes Icons
Name of the Vulnerable Software and Affected Versions: Elegant Themes Icons versions 1.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For...
The vulnerability of the disaster recovery mechanism for the VMware Cloud Director Availability, related to deficiencies in neutralizing special symbols, allows attackers to execute cross-site scripting (XSS) attacks.
The vulnerability of the disaster recovery tool for VMware Cloud Director Availability relates to deficiencies in neutralizing special symbols. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attacks by injecting malicious HTML tags...
CVE-2024-37447
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PixelYourSite PixelYourSite – Your smart PIXEL TAG Manager allows Stored XSS.This issue affects PixelYourSite – Your smart PIXEL TAG Manager: from n/a through 9.6.1.1...
CVE-2024-37457
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Ultimate Blocks Ultimate Blocks – Gutenberg Blocks Plugin allows Stored XSS.This issue affects Ultimate Blocks – Gutenberg Blocks Plugin: from n/a through 3.1.9...
CVE-2024-38782
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MapsMarker.Com e.U. Leaflet Maps Marker allows Stored XSS.This issue affects Leaflet Maps Marker: from n/a through 3.12.9...
CVE-2024-37465
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Senol Sahin GPT3 AI Content Writer allows Stored XSS.This issue affects GPT3 AI Content Writer: from n/a through 1.8.66...
CVE-2024-37485
CVE-2024-37485 is a reflected Cross-Site Scripting vulnerability in the bbPress Notify (No-Spam) WordPress plugin, caused by improper input neutralization during web page generation. Affected versions are bbPress Notify 2.18.3 and earlier. Public sources (NVD, Red Hat, CVE lists, and Wordfence vu...
CVE-2024-38786
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BurgerThemes CoziPress allows Stored XSS.This issue affects CoziPress: from n/a through 1.0.30...
CVE-2024-38785
CVE-2024-38785 refers to a stored XSS vulnerability in the Gutenverse plugin for WordPress (Gutenverse: from n/a through 1.9.2). The issue arises from improper neutralization of input during web page generation, enabling cross-site scripting. Public details list affected versions as Gutenverse
CVE-2024-38786
CVE-2024-38786 is a Stored XSS vulnerability in the WordPress theme CoziPress (BurgerThemes) due to improper neutralization during web page generation. Affected versions are listed as CoziPress ≤ 1.0.30. Public details in the connected documents do not provide a confirmed patch or fixed version; ...
CVE-2024-37519
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Leap13 Premium Blocks – Gutenberg Blocks for WordPress allows Stored XSS.This issue affects Premium Blocks – Gutenberg Blocks for WordPress: from n/a through 2.1.27...