Lucene search
+L

13331 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/06 12:00 a.m.•8 views

CVE-2024-47300: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Imran Tauqeer CubeWP Forms cubewp-forms allows Stored XSS.This issue affects CubeWP Forms: from n/a through = 1.1.1...

7.1CVSS5.8AI score0.00287EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/06 12:00 a.m.•9 views

CVE-2024-47348: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YellowPencil YellowPencil Visual CSS Style Editor yellow-pencil-visual-theme-customizer allows Reflected XSS.This issue affects YellowPencil Visual CSS Style Editor: from n/a through = 7.6.4...

7.1CVSS5.8AI score0.0032EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/06 12:00 a.m.•8 views

CVE-2024-47343: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kraft Plugins Mega Elements mega-elements-addons-for-elementor allows Stored XSS.This issue affects Mega Elements: from n/a through = 1.2.4...

6.5CVSS5.8AI score0.00275EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/06 12:00 a.m.•12 views

CVE-2024-47339: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JWardee WP Mail Catcher wp-mail-catcher allows Reflected XSS.This issue affects WP Mail Catcher: from n/a through = 2.1.9...

7.1CVSS5.8AI score0.0032EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/06 12:00 a.m.•9 views

CVE-2024-47363: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Blockspare Blockspare blockspare allows Stored XSS.This issue affects Blockspare: from n/a through = 3.2.4...

6.5CVSS5.8AI score0.0026EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/10/06 12:00 a.m.•22 views

WordPress plugin ElementsReady Addons for Elementor: Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.5CVSS5.5AI score0.00277EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/10/06 12:00 a.m.•37 views

PT-2024-31509 · Elfsight · Elsight

Name of the Vulnerable Software and Affected Versions: Elsight affected versions not specified Description: The issue is related to improper neutralization of special elements used in an OS command, also known as OS Command Injection. This is classified as CWE-78. Recommendations: At the moment,...

9.8CVSS6.9AI score0.01007EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/10/06 12:00 a.m.•24 views

PT-2024-30893 · Unknown · Temegum Gum Elementor Addon

Name of the Vulnerable Software and Affected Versions: TemeGUM Gum Elementor Addon versions 1.3.6 and earlier Description: The issue affects TemeGUM Gum Elementor Addon, allowing Stored XSS due to improper neutralization of input during web page generation. This is a Cross-site Scripting...

6.5CVSS5.7AI score0.00275EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/10/06 12:00 a.m.•19 views

WordPress plugin WP Datepicker has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site...

5.9CVSS5.5AI score0.00313EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/10/06 12:00 a.m.•27 views

WordPress plugin Unlimited Elements For Elementor: Cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS5.5AI score0.00327EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/10/06 12:00 a.m.•18 views

WordPress plugin Bold Page Builder has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.5AI score0.00329EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/10/06 12:00 a.m.•21 views

WordPress plugin Viala has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

7.1CVSS5.5AI score0.00287EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/10/06 12:00 a.m.•19 views

WordPress plugin Chartify has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS5.5AI score0.0032EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/10/06 12:00 a.m.•25 views

WordPress plugin WPMobile.App has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS5.5AI score0.0032EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/06 12:00 a.m.•9 views

CVE-2024-47299: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Stored XSS.This issue affects Coming Soon Page, Under Construction & Maintenance Mode by SeedProd: fr...

5.9CVSS5.8AI score0.00275EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/06 12:00 a.m.•14 views

CVE-2024-44043: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 10Web Photo Gallery by 10Web photo-gallery allows Stored XSS.This issue affects Photo Gallery by 10Web: from n/a through = 1.8.27...

5.9CVSS5.8AI score0.00313EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/06 12:00 a.m.•10 views

CVE-2024-44045: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kevon Adonis WP Abstracts wp-abstracts-manuscripts-manager allows Stored XSS.This issue affects WP Abstracts: from n/a through = 2.6.5...

5.9CVSS5.8AI score0.00313EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/06 12:00 a.m.•11 views

CVE-2024-47332: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wowDevs Sky Addons for Elementor sky-elementor-addons allows Stored XSS.This issue affects Sky Addons for Elementor: from n/a through = 2.5.11...

6.5CVSS5.8AI score0.00277EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/06 12:00 a.m.•8 views

CVE-2024-47365: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atakan Au Automatically Hierarchic Categories in Menu automatically-hierarchic-categories-in-menu allows Stored XSS.This issue affects Automatically Hierarchic Categories in Menu: from n/a through ...

6.5CVSS5.8AI score0.00253EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/06 12:00 a.m.•15 views

CVE-2024-44035: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atawai Gum Elementor Addon gum-elementor-addon allows Stored XSS.This issue affects Gum Elementor Addon: from n/a through = 1.3.7...

6.5CVSS5.8AI score0.00275EPSS
SaveExploits0References1
Rows per page
Query Builder