CVE-2024-43987

CVE-2024-43987 is a stored XSS in the WordPress theme Sliding Door (Aka Sliding Door plugin) due to improper input neutralization during page generation. Affected versions are n/a through 3.6. Public sources identify the vulnerability as Stored XSS in Sliding Door and reference a remediation path...

CVE-2024-43988

CVE-2024-43988 involves a Stored XSS in the Mystique WordPress theme by digitalnature caused by improper neutralization of input during web page generation. Affected: Mystique up to 2.5.7 (n/a through 2.5.7). The issue enables injection of malicious scripts via user input embedded in generated pa...

CVE-2024-45452

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CryoutCreations Septera septera allows Stored XSS.This issue affects Septera: from n/a through 1.5.1...

CVE-2024-45451

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cryout-creations Roseta roseta allows Stored XSS.This issue affects Roseta: from n/a through = 1.3.0...

CVE-2024-44049

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeHunk Gutenberg Blocks unlimited-blocks.This issue affects Gutenberg Blocks: from n/a through = 1.2.8...

CVE-2024-44004

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows SQL Injection. This issue affects WPCargo Track & Trace: before 8.0.4...

CVE-2024-44047

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in IDX Broker IMPress for IDX Broker allows Stored XSS.This issue affects IMPress for IDX Broker: from n/a through 3.2.2...

CVE-2024-44047

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IDX Broker IMPress for IDX Broker idx-broker-platinum allows Stored XSS.This issue affects IMPress for IDX Broker: from n/a through = 3.2.2...

CVE-2024-44003

CVE-2024-44003 describes a Reflected Cross‑Site Scripting vulnerability in the WordPress plugin Spice Starter Sites . Affected versions are

CVE-2024-44008 WordPress Geo Mashup plugin <= 1.13.12 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Stored XSS.This issue affects Geo Mashup: from n/a through = 1.13.12...

CVE-2024-44047

The CVE-2024-44047 entry concerns the WordPress plugin IMPress for IDX Broker (

CVE-2024-43985

CVE-2024-43985 is a stored XSS vulnerability in the MagePeople WordPress plugin “Bus Ticket Booking with Seat Reservation” (WPBusTicketly) up to version 5.3.5. The issue stems from improper input neutralization during web page generation, enabling stored cross-site scripting via user-supplied inp...

CVE-2024-45451

CVE-2024-45451 describes a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress Roseta theme by CryoutCreations. The issue arises from improper neutralization of input during web page generation, enabling XSS in Roseta versions up to and including 1.3.0. The connected documents consis...

CVE-2024-45452

CVE-2024-45452 is a stored XSS in the WordPress Septera theme (CryoutCreations Septera)

CVE-2024-38860

Improper neutralization of input in Checkmk before versions 2.3.0p16 and 2.2.0p34 allows attackers to craft malicious links that can facilitate phishing attacks...

CVE-2024-38860 Reflected links in error message facilitate phishing attacks

Improper neutralization of input in Checkmk before versions 2.3.0p16 and 2.2.0p34 allows attackers to craft malicious links that can facilitate phishing attacks...

CVE-2024-38860

CVE-2024-38860 affects Checkmk before versions 2.3.0p16 and 2.2.0p34. The issue is improper neutralization of input that allows attackers to craft malicious links, facilitating phishing attacks. Impact is tied to web-facing link handling and error messaging. Remediation: upgrade to Checkmk 2.3.0p...

CVE-2024-38860 Reflected links in error message facilitate phishing attacks

Improper neutralization of input in Checkmk before versions 2.3.0p16 and 2.2.0p34 allows attackers to craft malicious links that can facilitate phishing attacks...

CVE-2024-38860 Reflected links in error message facilitate phishing attacks

Improper neutralization of input in Checkmk before versions 2.3.0p16 and 2.2.0p34 allows attackers to craft malicious links that can facilitate phishing attacks...

CVE-2024-38860

Improper neutralization of input in Checkmk before versions 2.3.0p16 and 2.2.0p34 allows attackers to craft malicious links that can facilitate phishing attacks...