PT-2024-28218 · Jegstudio · Jegstudio Gutenverse

Name of the Vulnerable Software and Affected Versions: Jegstudio Gutenverse versions 1.9.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For...

PT-2024-28002 · Commugen · Commugen Sox 365

Name of the Vulnerable Software and Affected Versions: Commugen SOX 365 affected versions not specified Description: The issue is related to improper neutralization of input during web page generation, which can lead to cross-site scripting. Recommendations: At the moment, there is no information...

PT-2024-27619 · Artistscope · Artistscope Copysafe Web Protection

Name of the Vulnerable Software and Affected Versions: ArtistScope CopySafe Web Protection versions 3.14 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...

CVE-2024-37955

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Zakaria Binsaifullah GutSlider – All in One Block Slider allows Stored XSS.This issue affects GutSlider – All in One Block Slider: from n/a through 2.7.3...

CVE-2024-37954

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in marcelotorres Simple Responsive Slider allows Reflected XSS.This issue affects Simple Responsive Slider: from n/a through 0.2.2.5...

CVE-2024-37950

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CodexHelp Master Popups allows Stored XSS.This issue affects Master Popups: from n/a through 1.0.3...

CVE-2024-37922

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Leap13 Premium Addons for Elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.10.34...

CVE-2024-37922

CVE-2024-37922 is a Stored XSS in Leap13 Premium Addons for Elementor (WordPress) affecting Premium Addons for Elementor up to version 4.10.34. The underlying issue is improper neutralization of input during web page generation. A patch exists (update to a version later than 4.10.34); apply the f...

CVE-2024-38720

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in EazyDocs eazydocs allows Stored XSS.This issue affects EazyDocs: from n/a through 2.5.0...

CVE-2024-38713

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus allows Stored XSS.This issue affects WP Photo Album Plus: from n/a through 8.8.02.002...

CVE-2024-38689

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Garrett Grimm Simple Popup allows Stored XSS.This issue affects Simple Popup: from n/a through 4.4...

CVE-2024-37961

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in codoc.Jp allows Stored XSS.This issue affects codoc: from n/a through 0.9.51.12...

CVE-2024-37960

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Chris Coyier CodePen Embedded Pens Shortcode allows Stored XSS.This issue affects CodePen Embedded Pens Shortcode: from n/a through 1.0.0...

CVE-2024-38670

CVE-2024-38670 is a stored Cross-Site Scripting flaw in the WordPress plugin Team Members (vulnerable through 5.3.3). It arises from improper input neutralization during web page generation, enabling stored XSS. The CVSS v3.1 base score is 6.5 (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L). Patch status i...

CVE-2024-38674 WordPress SKT Addons for Elementor plugin <= 3.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in SKT Themes SKT Addons for Elementor allows Stored XSS.This issue affects SKT Addons for Elementor: from n/a through 3.0...

CVE-2024-38675

CVE-2024-38675 is an Arkhe Blocks (WordPress) vulnerability: improper input neutralization enabling Stored XSS in Arkhe Blocks versions up to 2.22.1. Exploitation details are not provided in the sources; remediation/fix version is not clearly stated. Patch status in the materials is not definitiv...

CVE-2024-38677

REVIEWS.io for WordPress plugin (REVIEWS.IO for WooCommerce)

CVE-2024-38694

CVE-2024-38694 is a Reflected XSS in the Moloni WordPress plugin (affected: up to version 4.7.4). Exploitable via improper input neutralization during web page generation. Remediation: upgrade to a version containing the fix (beyond 4.7.4) per the CVE details.

CVE-2024-38705

CVE-2024-38705 affects ElementInvader Addons for Elementor (WordPress). The vulnerability is a Stored XSS caused by improper neutralization of input during web page generation, affecting ElementInvader Addons for Elementor versions up to and including 1.2.4. Mitigation: upgrade to a version later...

CVE-2024-38711

CVE-2024-38711 is a reflected XSS in WordPress Link Library plugin. The issue arises from improper input neutralization during web page generation, allowing cross-site scripting. Affected versions are Link Library: from n/a through 7.7.1. CVSS metrics from NVD show MEDIUM risk (6.1 base, AV:N/AC:...