CVE-2024-52487

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webcodingplace Ultimate Classified Listings ultimate-classified-listings allows Stored XSS.This issue affects Ultimate Classified Listings: from n/a through = 1.7...

CVE-2024-52489

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in udidol Add Chat App Button add-whatsapp-button allows Stored XSS.This issue affects Add Chat App Button: from n/a through = 2.1.5...

CVE-2024-52466

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Explara Explara Events explara-events allows Reflected XSS.This issue affects Explara Events: from n/a through = 0.1.3...

CVE-2024-52453

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in photonicgnostic Library Bookshelves library-bookshelves allows Reflected XSS.This issue affects Library Bookshelves: from n/a through = 5.8...

CVE-2024-52454

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in goqsystem GoQMieruca goqmieruca allows Reflected XSS.This issue affects GoQMieruca: from n/a through = 1.0.3...

CVE-2024-51900

CVE-2024-51900 is a stored XSS in the WordPress plugin What Would Seth Godin Do (versions

CVE-2024-52454

CVE-2024-52454 affects the WordPress GoQMieruca plugin (GoQMieruca) from GoQSystem Inc. A Reflected XSS flaw arises from improper input neutralization during web page generation, affecting versions up to 1.0.0. Public records indicate a patch exists with version 1.0.1 or later; upgrading to 1.0.1...

CVE-2024-52454 WordPress GoQMieruca plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in goqsystem GoQMieruca goqmieruca allows Reflected XSS.This issue affects GoQMieruca: from n/a through = 1.0.3...

CVE-2024-52455

CVE-2024-52455 — WordPress plugin GoQSmile from GoQSystem Inc. suffers a Reflected XSS due to improper input handling. Affected versions include GoQSmile

CVE-2024-52464

CVE-2024-52464: Reflected XSS in WordPress plugin amr shortcodes (versions 1.7 and earlier). Root cause is improper input handling during web page generation, enabling an attacker-controlled input to be reflected in the output. Affected component: amr shortcodes. Impact: Reflected XSS risk on pag...

CVE-2024-52466

CVE-2024-52466 is a WordPress vulnerability in the Explara Events plugin, affecting versions up to 0.1.3. It is a reflected Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. The CVSS 3.1 base score is 7.1 (HIGH) with network attack vector, no privilege...

CVE-2024-52465

CVE-2024-52465 is a WordPress LGPD Framework (Data443) vulnerability: Reflected XSS due to improper input neutralization during web page generation. Affected versions are LGPD Framework: n/a through 2.0.2. Public sources (NVD, Red Hat, CIRCL, Patchstack) agree on a Reflected XSS issue with CVSS v...

CVE-2024-52478

CVE-2024-52478 is a Cross-Site Scripting (Stored XSS) vulnerability in the Ben Marshall Jobify – Job Board WordPress Theme, affecting versions up to 4.2.3 (n/a through 4.2.3). The issue arises from improper input neutralization during web page generation. Multiple connected sources explicitly con...

CVE-2024-52492

CVE-2024-52492 details a Stored Cross-Site Scripting (XSS) flaw in the WordPress plugin Image horizontal reel scroll slideshow (versions

CVE-2024-53759

CVE-2024-53759 refers to a CSRF to Stored Cross‑Site Scripting (XSS) vulnerability in the WordPress plugin “ArCa Payment Gateway” (versions 1.3.1 and earlier). The issue arises from improper input neutralization during web page generation, enabling stored XSS. Affected software is the ArCa Paymen...

CVE-2024-53721: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stachethemes Advanced Event Manager advanced-event-manager allows Stored XSS.This issue affects Advanced Event Manager: from n/a through = 1.1.6...

CVE-2024-52502: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ImbaSynergy ImbaChat imbachat-widget allows DOM-Based XSS.This issue affects ImbaChat: from n/a through = 3.1.4...

CVE-2024-52491: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sanil Shakya Sticky Social Icons sticky-social-icons allows Stored XSS.This issue affects Sticky Social Icons: from n/a through = 1.2.1...

CVE-2024-52460: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in atarapay AtaraPay WooCommerce Payment Gateway atarapay-woocommerce allows Reflected XSS.This issue affects AtaraPay WooCommerce Payment Gateway: from n/a through = 2.0.13...

CVE-2024-52454: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in goqsystem GoQMieruca goqmieruca allows Reflected XSS.This issue affects GoQMieruca: from n/a through = 1.0.3...