CVE-2024-51816

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saul Morales Pacheco Banner System banner-system allows Stored XSS.This issue affects Banner System: from n/a through = 1.0.0...

CVE-2024-51811

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hussam Hussien Popup Image popup-image allows Stored XSS.This issue affects Popup Image: from n/a through = 1.0.1...

CVE-2024-51810

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in George Lewe Lewe Bootstrap Visuals shortcode-bootstrap-visuals allows Stored XSS.This issue affects Lewe Bootstrap Visuals: from n/a through = 3.0.1...

CVE-2024-51808

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pat O’Brien codeSnips codesnips allows Stored XSS.This issue affects codeSnips: from n/a through = 1.2...

CVE-2024-51801

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jakeatthrive Brand my Footer brand-my-footer allows DOM-Based XSS.This issue affects Brand my Footer: from n/a through = 1.1...

CVE-2024-51798

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Surbma Surbma | Font Awesome surbma-font-awesome allows DOM-Based XSS.This issue affects Surbma | Font Awesome: from n/a through = 3.0...

CVE-2024-50556

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WorldMarkerter WM Zoom wm-zoom allows DOM-Based XSS.This issue affects WM Zoom: from n/a through = 1.0...

CVE-2024-50547

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mark Hodder Themedy Toolbox themedy-toolbox allows DOM-Based XSS.This issue affects Themedy Toolbox: from n/a through = 1.0.16...

CVE-2024-50540

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in demixpress dp AddThis dp-addthis allows Stored XSS.This issue affects dp AddThis: from n/a through = 1.0.2...

CVE-2024-50536

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tamer Ziady GDReseller gdreseller allows DOM-Based XSS.This issue affects GDReseller: from n/a through = 1.6...

CVE-2024-50532

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jerin K Alexander Events Manager Pro – extended events-manager-pro-extended allows Reflected XSS.This issue affects Events Manager Pro – extended: from n/a through = 0.1...

CVE-2024-50513

The CVE-2024-50513 vulnerability affects WordPress PostX plugin (Post Grid Gutenberg Blocks and WordPress Blog Plugin) versions up to and including 4.1.15. The underlying flaw is improper neutralization of input during web page generation, enabling Stored XSS. Impact is described as stored XSS wi...

CVE-2024-50516

CVE-2024-50516 affects WordPress Countdown & Clock plugin, specifically versions up to 2.8.0.9 (WordPress Countdown & Clock). The vulnerability is a Cross-Site Scripting (Stored XSS) due to improper input neutralization during web page generation, as described by multiple sources. The CVE descrip...

CVE-2024-50517

CVE-2024-50517 affects WordPress ID-SK Toolkit plugin (ID-SK Toolkit) up to version 1.7.2, with a Stored XSS due to improper input neutralization during page generation. Public details across connected sources confirm the vulnerability and affected range (1.7.2 and earlier); no fix version is pro...

CVE-2024-50522 WordPress WeChat Subscribers Lite plugin <= 1.6.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in redyyu WeChat Subscribers Lite wechat-subscribers-lite allows Reflected XSS.This issue affects WeChat Subscribers Lite : from n/a through = 1.6.6...

CVE-2024-50536

CVE-2024-50536 concerns the WordPress WordPress GDReseller plugin, affected versions

CVE-2024-50551

CVE-2024-50551 corresponds to a Stored XSS in WordPress plugin EndomondoWP (versions 0.1.1 and earlier). The vulnerability is due to improper neutralization of input during web page generation. Affected software: EndomondoWP

CVE-2024-50552

CVE-2024-50552: WordPress Hover Video Preview plugin versions 1.0.2 and earlier are affected by a Stored XSS due to improper neutralization of input during web page generation. The connected sources consistently describe this as a Stored XSS vulnerability in Hover Video Preview (CVE-2024-50552); ...

CVE-2024-50556

CVE-2024-50556 affects WordPress WM Zoom plugin versions

CVE-2024-51794

CVE-2024-51794 is a Stored XSS vulnerability in WordPress Storely theme (NotFound Storely) due to improper input neutralization during page generation. Affected versions are reported as from n/a through 14.7. The Connected documents corroborate Cross-Site Scripting via input handling and list Sto...