8882 matches found
CVE-2024-30430 WordPress FluentCRM plugin <= 2.8.44 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Email Newsletter Team - FluentCRM Fluent CRM allows Stored XSS.This issue affects Fluent CRM: from n/a through 2.8.44...
CVE-2024-30429
CVE-2024-30429 is a stored XSS in the WordPress plugin wp-forecast (Hans Matzen). The Red Hat CVE entry states: Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) allowing Stored XSS, affecting wp-forecast from n/a through 9.2. The coordinated description confirms ...
CVE-2024-30428
CVE-2024-30428 is described as a Reflected XSS in Contest Gallery, but the provided documents do not include concrete technical details (affected versions, root cause, or fix). Monitor for updates.
CVE-2024-30425
CVE-2024-30425 affects the WordPress Beaver Builder plugin (Beaver Builder) up to version 2.7.4.4. The issue is a stored cross-site scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. In practical terms, this means attacker-supplied input could be ...
CVE-2024-30520
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Labib Ahmed Carousel Anything For WPBakery Page Builder allows Stored XSS.This issue affects Carousel Anything For WPBakery Page Builder: from n/a through 2.1...
CVE-2024-30503
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EverPress Mailster mailster.This issue affects Mailster: from n/a through = 4.0.6...
CVE-2024-30423
CVE-2024-30423 is an Stored XSS vulnerability in the WordPress plugin Better Elementor Addons, affecting versions from n/a up to 1.3.7. The initial description attributes the flaw to improper neutralization of input during web page generation. Red Hat’s entry provides the same description. The co...
CVE-2022-47153
CVE-2022-47153 : Reflected Cross-Site Scripting in the WPJobBoard Jobeleon Theme (affected: Jobeleon Theme from n/a through 1.9.1) due to improper input neutralization during web page generation. Red Hat and Wordfence references corroborate the vulnerability and its cross‑site scripting nature bu...
CVE-2024-30483
CVE-2024-30483 is a Stored XSS vulnerability in the Simple Sponsorships Sponsors (WordPress plugin) affecting Sponsors: from n/a through 3.5.1; corroborated by Red Hat CVE-2024-30483 entry with identical description. No public remediation details are provided in the connected documents.
CVE-2023-6371 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions before 16.8.5, all versions starting from 16.9 before 16.9.3, all versions starting from 16.10 before 16.10.1. A wiki page with a crafted payload may lead to a Stored XSS, allowing attackers to perform arbitrary actions on behalf...
CVE-2024-29238
Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in Log.CountByCategory webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to read database containing non-sensitive information and...
CVE-2024-29230
Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in SnapShot.CountByCategory webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to read database containing non-sensitive information...
CVE-2024-28002
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Archetyped Cornerstone allows Reflected XSS.This issue affects Cornerstone: from n/a through 0.8.0...
CVE-2023-39309
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from n/a through 3.11.1...
CVE-2024-28002
Cornerstone (WordPress plugin) CVE-2024-28002 describes a Reflected XSS vulnerability in Cornerstone versions up to 0.8.0. The issue is caused by improper neutralization of input during web page generation, enabling script execution in a victim’s browser. Patch status shown in connected data is P...
CVE-2024-29239
Summary (CVE-2024-29239) : A SQL injection vulnerability exists in the Recording.CountByCategory webapi component of Synology Surveillance Station prior to 9.2.0-11289 and 9.2.0-9289. The issue stems from improper neutralization of special elements in SQL commands, enabling remote authenticated u...
CVE-2024-29236
Synology Surveillance Station is affected by CVE-2024-29236 due to an SQL injection vulnerability in the AudioPattern.Delete webapi component. The flaw arises from improper neutralization of special elements used in SQL commands, enabling remote authenticated users to read the database and cause ...
CVE-2024-29230
This CVE affects Synology Surveillance Station, specifically the SnapShot.CountByCategory webapi component. The root cause is improper neutralization of SQL commands (SQL injection) in this endpoint, allowing remote authenticated users to inject SQL and read data from the database, with potential...