CVE-2024-49696: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in robosoft Robo Gallery robo-gallery allows Stored XSS.This issue affects Robo Gallery: from n/a through = 3.2.21...

CVE-2024-49702: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saad Iqbal myCred Elementor mycred-for-elementor allows Stored XSS.This issue affects myCred Elementor: from n/a through = 1.2.6...

Cisco IOS XR Arbitrary Command Execution

The vulnerability of the Routed PON Controller Software in Cisco IOS XR routers from the Cisco NCS 540 Series, NCS 5500 Series, and NCS 5700 Series routers exists due to the lack of measures taken to neutralize specific elements used in the operating system commands. Exploiting this vulnerability...

Golang Code Execution

The vulnerability of the Go programming language is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2024-47328

CVE-2024-47328 is an SQL Injection vulnerability in the WordPress plugin FunnelKit Automation By Autonami . It affects versions up to 3.1.2 and stems from improper neutralization of SQL commands. Exploitation requires Administrator privileges, with network attack potential and impact on confident...

CVE-2024-49619

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Acespritech Solutions Pvt. Ltd. Social Link Groups allows Blind SQL Injection.This issue affects Social Link Groups: from n/a through 1.1.0...

CVE-2024-49618

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Jordan Lyall MyTweetLinks allows Blind SQL Injection.This issue affects MyTweetLinks: from n/a through 1.1.1...

CVE-2024-49631

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Md Abdul Kader Easy Addons for Elementor easy-addons-for-elementor allows Stored XSS.This issue affects Easy Addons for Elementor: from n/a through = 1.5.0...

CVE-2024-48049

CVE-2024-48049 is a Stored XSS in Mighty Builder (WordPress) plugin up to version 1.0.2 caused by improper input neutralization during web page generation. The vulnerability affects Mighty Builder and can store malicious scripts on affected sites. Security ratings in the documents show a low over...

CVE-2024-49334 WordPress jLayer Parallax Slider plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Unizoe Web Solutions jLayer Parallax Slider jlayer-parallax-slider-wp allows Reflected XSS.This issue affects jLayer Parallax Slider: from n/a through = 1.0...

CVE-2024-49631: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Md Abdul Kader Easy Addons for Elementor easy-addons-for-elementor allows Stored XSS.This issue affects Easy Addons for Elementor: from n/a through = 1.5.0...

PT-2024-33561 · Dotsquares · Dotsquares Google Map Locations

Name of the Vulnerable Software and Affected Versions: Dotsquares Google Map Locations versions n/a through 1.0 Description: The issue is related to improper neutralization of input during web page generation, allowing Reflected XSS. This means an attacker can inject malicious scripts into the...

CVE-2024-43300

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bert Movie Database movie-database allows Stored XSS.This issue affects Movie Database: from n/a through = 1.0.11...

CVE-2024-43300 WordPress Movie Database plugin <= 1.0.11 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bert Movie Database movie-database allows Stored XSS.This issue affects Movie Database: from n/a through = 1.0.11...

CVE-2024-49231

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cyclop WordPress Video wordpress-video allows Stored XSS.This issue affects WordPress Video: from n/a through = 1.0...

CVE-2024-49225

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in swebdeveloper wpPricing Builder wppricing-builder-lite-responsive-pricing-table-builder allows Stored XSS.This issue affects wpPricing Builder: from n/a through = 1.5.0...

CVE-2024-49225

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Swebdeveloper wpPricing Builder allows Stored XSS.This issue affects wpPricing Builder: from n/a through 1.5.0...

CVE-2024-49228

CVE-2024-49228 describes a Stored XSS vulnerability in WordPress plugin bVerse Convert (versions

CVE-2024-49231

CVE-2024-49231 affects WordPress Video plugin (wordpress-video) version

CVE-2024-49238

CVE-2024-49238 covers the WordPress ADIF Log Search Widget (plugin) ≤ 1.0f, with a Reflected XSS via improper input neutralization during web page generation. The connected documents confirm the issue but do not provide a publicly available fixed version; Patchstack notes Fixed in: N/A and recomm...