CVE-2024-4234

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sayful Islam Filterable Portfolio allows Stored XSS.This issue affects Filterable Portfolio: from n/a through 1.6.4...

CVE-2024-33695

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeNcode Fan Page Widget by ThemeNcode allows Stored XSS.This issue affects Fan Page Widget by ThemeNcode: from n/a through 2.0...

CVE-2024-33696

CVE-2024-33696 describes a stored cross-site scripting vulnerability in the Broadstreet XPRESS WordPress Ad Widget. The Red Hat security entry mirrors this vulnerability, noting the issue as an “Improper Neutralization of Input During Web Page Generation” affecting the WordPress Ad Widget until v...

CVE-2024-33598

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Twinpictures Annual Archive allows Stored XSS.This issue affects Annual Archive: from n/a through 1.6.0...

CVE-2024-33598

Technical details about CVE-2024-33598 are not provided in the Connected Documents. The Initial description notes a Stored XSS in the WordPress Annual Archive (up to 1.6.0). Monitor for updates; no specifics on affected versions, vectors, or remediation are included.

WordPress plugin Meks Smart Social Widget 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

WordPress plugin Filterable Portfolio 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin CF7 File Download – File Download for CF7 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin CF7 File Download - A...

WordPress plugin Smart Recent Posts Widget 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress plugi...

CVE-2024-4077

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign allows Reflected XSS.This issue affects UDesign: from n/a through 4.7.3...

VulnCheck KEV: CVE-2024-33551

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in 8theme XStore Core allows SQL Injection.This issue affects XStore Core: from n/a through 5.3.5...

VulnCheck KEV: CVE-2024-33571

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Infomaniak Network VOD Infomaniak vod-infomaniak.This issue affects VOD Infomaniak: from n/a through = 1.5.6...

CVE-2023-25790

Improper Authentication, Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xtemos WoodMart allows Cross-Site Scripting XSS.This issue affects WoodMart: from n/a through 7.0.4...

CVE-2023-23989

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Metagauss RegistrationMagic.This issue affects RegistrationMagic: from n/a through 5.1.9.2...

CVE-2023-23989

CVE-2023-23989 affects the WordPress RegistrationMagic plugin up to version 5.1.9.2. It is an Improper Neutralization of Input During Web Page Generation (XSS) vulnerability causing content injection via untrusted input in RegistrationMagic. Root cause: insufficient input sanitization during page...

CVE-2024-32722

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Coupon & Discount Code Reveal Button allows Stored XSS.This issue affects Coupon & Discount Code Reveal Button: from n/a through 1.2.5...

CVE-2024-32702

CVE-2024-32702 is a Reflected XSS in ARForms (WordPress). Affected ARForms versions are up to and including 6.4; patched in 6.4. Exploitation details are not provided in the sources; the vulnerability arises from improper input neutralization during web page generation. Remediation per sources: u...

CVE-2024-32721

CVE-2024-32721 concerns the WordPress Jeg Elementor Kit plugin, with Stored XSS in the Testimonial Widget Attributes affecting versions up to 2.6.3. Red Hat notes insufficient input sanitization and output escaping, enabling authenticated attackers with contributor access or higher to inject scri...

CVE-2024-32723

CVE-2024-32723 affects the WordPress plugin Advanced Floating Content Lite (v0 through 1.2.5). It is a Stored XSS due to improper neutralization of input during web page generation. The connected documents do not provide a specific exploit path or a confirmed fix/version beyond the affected range.

CVE-2024-32952

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BloomPixel Max Addons Pro for Bricks allows Reflected XSS.This issue affects Max Addons Pro for Bricks: from n/a through 1.6.1...