8882 matches found
CVE-2024-29912
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Baptiste Placé iCalendrier allows Stored XSS.This issue affects iCalendrier: from n/a through 1.80...
CVE-2024-29820
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RedNao PDF Builder for WPForms allows Stored XSS.This issue affects PDF Builder for WPForms: from n/a through 1.2.88...
CVE-2024-29906
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter MDTF allows Stored XSS.This issue affects WordPress Meta Data and Taxonomies Filter MDTF: from n/a through 1.3.2...
CVE-2024-29921 WordPress Photo Gallery by Supsystic plugin <= 1.15.16 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in supsystic Photo Gallery by Supsystic gallery-by-supsystic.This issue affects Photo Gallery by Supsystic: from n/a through = 1.15.16...
CVE-2024-29919
Technical details about CVE-2024-29919 are not provided in the supplied documents. No information on affected versions, exploit status, or remediation is present. Monitor for updates.
CVE-2024-29918
CVE-2024-29918 : The Survey Maker WordPress plugin is described as vulnerable to a reflected Cross-Site Scripting (XSS) due to improper input neutralization during web page generation. Affected: Survey Maker (WordPress) versions from n/a through 4.0.6. Root cause: insufficient input sanitization ...
CVE-2024-29912
CVE-2024-29912 is a stored XSS in the WordPress plugin iCalendrier , caused by improper neutralization during web page generation. Affected versions are listed as from n/a through 1.80 . The connected Red Hat entry reiterates the same vulnerability description. No remediation/patch details are pr...
CVE-2024-29910
CVE-2024-29910 refers to a Stored Cross-Site Scripting (XSS) flaw in the WordPress plugin “Dropdown Multisite selector.” The connected data indicate this affects versions up to 0.9.2 (listed as <= 0.9.2) with the issue described as Stored XSS via shortcode. The vulnerability is categorized as ...
CVE-2024-29909
Technical details for CVE-2024-29909 are not publicly provided in the supplied documents. Monitor for updates from vendors/patch sources; current items reference the vulnerability but do not specify remediation or affected versions beyond 2.2.0.
CVE-2024-29820
CVE-2024-29820 is a stored XSS in RedNao PDF Builder for WPForms caused by improper neutralization of input during web page generation. Affected product: PDF Builder for WPForms, versions: n/a through 1.2.88. CVSS 3.1 vector: AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L (base 6.5, MEDIUM). Connected sourc...
CVE-2024-29907
CVE-2024-29907 affects the SEO Backlink Monitor plugin for WordPress, exposing a Reflected XSS in web page generation. Affected: SEO Backlink Monitor
CVE-2024-30196
CVE-2024-30196 affects Appscreo Easy Social Share Buttons for WordPress (affected: up to version 9.4). The vulnerability is an improper neutralization of input during web page generation, resulting in a reflected cross-site scripting (XSS) flaw. The Red Hat entry confirms the CVE and its descript...
CVE-2024-27188
CVE-2024-27188 concerns the WordPress Breeze plugin (Cloudways Breeze) with a stored XSS vulnerability caused by improper neutralization of input during web page generation. Affected versions are Breeze through 2.1.3; the patch is to upgrade to version 2.1.4 or later. The issue requires the attac...
CVE-2024-30197
CVE-2024-30197 corresponds to an authenticated Stored XSS in the WordPress plugin Church Admin. According to the entry, Church Admin versions up to 4.0.26 are affected and allow stored XSS via shortcode due to improper input neutralization during web page generation. The vulnerability impact is c...
CVE-2024-22299
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Foliovision: Making the web work for you FV Flowplayer Video Player allows Reflected XSS.This issue affects FV Flowplayer Video Player: from n/a through 7.5.41.7212...
CVE-2024-30199
CVE-2024-30199 is a Reflected XSS in WP-Lister Lite for Amazon (WordPress plugin) affecting versions up to 2.6.8. Connected Red Hat entry corroborates the same vulnerability description. The CVSSv3.1 base metrics provided in the initial data indicate a base score of 7.1 (HIGH) with Network attack...
CVE-2024-22288
Technical details about CVE-2024-22288 are not publicly provided in the supplied documents; monitor for updates.
CVE-2024-22311
Technical details about CVE-2024-22311 are not publicly provided in the supplied documents. The initial entry notes an XSS issue in Simply Schedule Appointments but no affected versions, impact specifics, exploit info, or fixes are disclosed here. Monitor for updates.
PT-2024-23290 · WordPress · Tomas Wordpress Tooltips
Name of the Vulnerable Software and Affected Versions: Tomas WordPress Tooltips versions prior to 9.4.5 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential remote attacks...
CVE-2024-27188
Improper Neutralization of Input During Web Page Generation ‘Cross-site Scripting’ vulnerability in Cloudways Breeze allows Stored XSS.This issue affects Breeze: from n/a through 2.1.3. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...