CVE-2024-31097

CVE-2024-31097 is a Reflected XSS in the WordPress SEO Title Tag plugin ( Stephan Spencer ), caused by improper input neutralization during web page generation and affects versions up to 3.5.9. This vulnerability is documented by Red Hat and Patchstack references; no mitigation details or patched...

CVE-2024-31123

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebDorado SpiderFAQ allows Reflected XSS.This issue affects SpiderFAQ: from n/a through 1.3.2...

CVE-2024-31117

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Moises Heberle WooCommerce Bookings Calendar.This issue affects WooCommerce Bookings Calendar: from n/a through 1.0.36...

CVE-2024-31106

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yooslider Yoo Slider allows Reflected XSS.This issue affects Yoo Slider: from n/a through 2.1.1...

CVE-2024-31108

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iFlyChat Team iFlyChat – WordPress Chat iflychat allows Stored XSS.This issue affects iFlyChat – WordPress Chat: from n/a through 4.7.2...

CVE-2024-30489

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in loopus WP Cost Estimation & Payment Forms Builder.This issue affects WP Cost Estimation & Payment Forms Builder: from n/a through 10.1.75...

CVE-2024-31102

CVE-2024-31102 is an input‑sanitization issue in the WordPress plugin Prenotazioni (by Scimone Ignazio) that allows Stored XSS via improper neutralization of input during web page generation. Affected range: Prenotazioni versions up to 1.7.4 (no details on fixed versions provided). Impact per the...

CVE-2024-31106

Technical details about CVE-2024-31106 are not provided in the supplied documents; no affected versions, root cause specifics, or remediation information are included here. Monitor for updates.

CVE-2024-31108

CVE-2024-31108 relates to iFlyChat – WordPress Chat (plugin), with a Stored XSS vulnerability in the web page generation input handling. The issue affects iFlyChat – WordPress Chat from n/a through 4.7.2, per the description. The connected data notes the vulnerability as a vulnerability in an act...

CVE-2024-30489

CVE-2024-30489 affects WP Cost Estimation & Payment Forms Builder for WordPress. Root cause: improper neutralization of SQL elements in a query, enabling SQL injection. Affected versions are up to 10.1.75 (n/a–10.1.75). CVSS v3.1 base score 8.5 (HIGH) with Attack Vector: Network, Attack Complexit...

PT-2024-23481 · Unknown · Sticky Anything

Name of the Vulnerable Software and Affected Versions: Sticky Anything versions n/a through 2.1.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for potentially malicious scripts to be injected into...

CVE-2024-30439

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BestWebSoft Limit Attempts by BestWebSoft allows Reflected XSS.This issue affects Limit Attempts by BestWebSoft: from n/a through 1.2.9...

CVE-2024-30435

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor.This issue affects Nexter Blocks: from n/a through = 3.2.5...

CVE-2024-30432

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins B Slider - Slider for your block editor allows Stored XSS.This issue affects B Slider - Slider for your block editor: from n/a through 1.1.12...

CVE-2024-30431

CVE-2024-30431 describes a Reflected XSS in the WordPress plugin Mang Board WP . The issue is caused by improper input neutralization during web page generation, affecting Mang Board WP versions from n/a through 1.8.0. Connected sources confirm the vulnerability type and affected version range; n...

CVE-2024-30436 WordPress Collect.chat plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Collect.Chat Inc. Collectchat allows Stored XSS.This issue affects Collectchat: from n/a through 2.4.1...

CVE-2024-30437 WordPress Webinar and Video Conference with Jitsi Meet plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPPOOL Webinar and Video Conference with Jitsi Meet allows Stored XSS.This issue affects Webinar and Video Conference with Jitsi Meet: from n/a through 2.6.3...

CVE-2024-30440

CVE-2024-30440 : Stored XSS in the WordPress plugin Themify Event Post (vulnerable through 1.2.7) due to improper input neutralization during web page generation. Affected component: Themify Event Post. Root cause: Improper Neutralization of Input During Web Page Generation. Impact details are li...

CVE-2024-30445

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GhozyLab, Inc. Web Icons allows Stored XSS.This issue affects Web Icons: from n/a through 1.0.0.10...

CVE-2024-30444

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zionbuilder.Io WordPress Page Builder – Zion Builder allows Stored XSS.This issue affects WordPress Page Builder – Zion Builder: from n/a through 3.6.9...