Lucene search
+L

13279 matches found

Positive Technologies
Positive Technologies
•added 2024/12/02 12:00 a.m.•21 views

PT-2024-35032 · Unknown · What Would Seth Godin Do

Name of the Vulnerable Software and Affected Versions: What Would Seth Godin Do versions prior to 2.1.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This enables attackers to inject malicious...

5.9CVSS9.2AI score0.00303EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/12/02 12:00 a.m.•20 views

WordPress plugin AMR shortcodes: cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS8AI score0.00354EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/02 12:00 a.m.•8 views

CVE-2024-52457: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in youneeq Youneeq Recommendations youneeq-panel allows Reflected XSS.This issue affects Youneeq Recommendations: from n/a through = 3.0.7...

7.1CVSS8.6AI score0.00354EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/02 12:00 a.m.•10 views

CVE-2024-52458: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zaymund TM Islamic Helper tm-islamic-helper allows Reflected XSS.This issue affects TM Islamic Helper: from n/a through = 1.0.1...

7.1CVSS8.5AI score0.00354EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/02 12:00 a.m.•7 views

PT-2024-35335

Name of the Vulnerable Software and Affected Versions Dynamic "To Top" versions 3.5.2 through n/a Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Stored XSS. Recommendations For versions 3.5.2...

5.9CVSS8.3AI score0.00332EPSS
SaveExploits0References4
NVD
NVD
•added 2024/12/01 10:15 p.m.•29 views

CVE-2024-53743

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aezaz Shaikh Countdown Timer for Elementor countdown-timer-for-elementor allows Stored XSS.This issue affects Countdown Timer for Elementor: from n/a through = 1.3.6...

6.5CVSS0.00239EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/01 9:23 p.m.•49 views

CVE-2024-53748 WordPress WP Mermaid plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Terry L. WP Mermaid wp-mermaid allows Stored XSS.This issue affects WP Mermaid: from n/a through = 1.0.2...

6.5CVSS0.00239EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/01 12:00 a.m.•24 views

PT-2024-35852 · Flickdevs · Flickdevs Countdown Timer For Elementor

Name of the Vulnerable Software and Affected Versions: FlickDevs Countdown Timer for Elementor versions 1.3.6 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows stored Cross-site Scripting XSS. This enables attackers to injec...

6.5CVSS8.9AI score0.00239EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/12/01 12:00 a.m.•20 views

WordPress plugin Stripe Donation has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.5CVSS8.1AI score0.00239EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/01 12:00 a.m.•20 views

WordPress plugin WP Mermaid has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

6.5CVSS8AI score0.00239EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/01 12:00 a.m.•20 views

WordPress Plugin Countdown Timer for Elementor: Cross-site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS8AI score0.00239EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/01 12:00 a.m.•9 views

WordPress plugin Elementor Image Gallery has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin.... A cross-site scripting...

6.5CVSS8AI score0.00239EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/30 10:15 p.m.•28 views

CVE-2024-53786

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Codeless Cowidgets – Elementor Addons cowidgets-elementor-addons allows Stored XSS.This issue affects Cowidgets – Elementor Addons: from n/a through = 1.2.0...

6.5CVSS0.00292EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/30 10:15 p.m.•28 views

CVE-2024-53771

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sergiomico SimpleSchema simpleschema-free allows DOM-Based XSS.This issue affects SimpleSchema: from n/a through = 1.7.6.9...

6.5CVSS0.00294EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/30 10:15 p.m.•29 views

CVE-2024-53767

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pixobe Pixobe Cartography pixobe-cartography allows DOM-Based XSS.This issue affects Pixobe Cartography: from n/a through = 1.0.1...

6.5CVSS0.00294EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/30 10:15 p.m.•28 views

CVE-2024-53756

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aftab Husain Vertical Carousel vertical-carousel-slider allows Stored XSS.This issue affects Vertical Carousel: from n/a through = 1.0.2...

6.5CVSS0.00294EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/30 9:57 p.m.•61 views

CVE-2024-53756

CVE-2024-53756 concerns the WordPress plugin Vertical Carousel (versions

6.5CVSS8.4AI score0.00294EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/30 9:15 p.m.•31 views

CVE-2024-53788

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in portfoliohub WordPress Portfolio Builder – Portfolio Gallery uber-grid allows Stored XSS.This issue affects WordPress Portfolio Builder – Portfolio Gallery: from n/a through = 1.1.7...

5.9CVSS0.00301EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/30 12:00 a.m.•9 views

CVE-2024-53764: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SoftHopper Softtemplates For Elementor softtemplates-for-elementor allows DOM-Based XSS.This issue affects Softtemplates For Elementor: from n/a through = 1.0.8...

6.5CVSS8.6AI score0.00294EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/30 12:00 a.m.•5 views

CVE-2024-53763: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rejuan Ahamed Best Addons for Elementor allows Stored XSS.This issue affects Best Addons for Elementor: from n/a through 1.0.5...

6.5CVSS8.6AI score0.00294EPSS
SaveExploits0References1
Rows per page
Query Builder