CVE-2024-43958

CVE-2024-43958 describes a Reflected XSS in the IntoTheDark WordPress theme/plugin by Gianni Porto. Publicly documented as impacting IntoTheDark: from n/a through 1.0.5, due to Improper Neutralization of Input During Web Page Generation. The connected Red Hat and ENISA entries corroborate the CVE...

CVE-2024-43960

CVE-2024-43960: Stored XSS in Web and WooCommerce Addons for WPBakery Builder (WPBakery Page Builder) due to improper input neutralization. Affected: Web and WooCommerce Addons for WPBakery Builder, versions n/a–1.4.6. Impact: stored cross-site scripting; specifics on exploit vectors and patch st...

CVE-2024-43963

CVE-2024-43963 is a reflected XSS in the YellowPencil Visual CSS Style Editor for WordPress (WaspThemes), allowing input neutralization bypass during HTML generation for versions up to 7.6.1. The issue is confirmed in multiple sources and is classified as a Web page generation input handling flaw...

CVE-2024-43964

CVE-2024-43964 is a stored cross-site scripting vulnerability in the WordPress plugin DSGVO All in one for WP . According to the provided references, the issue arises from improper neutralization of input during web page generation, allowing stored XSS. Affected versions are listed as from n/a th...

CVE-2024-39620

CVE-2024-39620 is the WordPress ListingPro plugin SQL Injection vulnerability (ListingPro

CVE-2024-8297

Summary: CVE-2024-8297 affects kitsada8621 Digital Library Management System v1.0. The vulnerability lies in the function JwtRefreshAuth within middleware/jwt_refresh_token_middleware.go , where manipulation of the Authorization parameter leads to improper output neutralization for logs. This iss...

CVE-2024-8297 kitsada8621 Digital Library Management System jwt_refresh_token_middleware.go JwtRefreshAuth neutralization for logs

A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been classified as problematic. Affected is the function JwtRefreshAuth of the file middleware/jwtrefreshtokenmiddleware.go. The manipulation of the argument Authorization leads to improper output neutralizatio...

CVE-2024-8297 kitsada8621 Digital Library Management System jwt_refresh_token_middleware.go JwtRefreshAuth neutralization for logs

A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been classified as problematic. Affected is the function JwtRefreshAuth of the file middleware/jwtrefreshtokenmiddleware.go. The manipulation of the argument Authorization leads to improper output neutralizatio...

CVE-2024-8297 kitsada8621 Digital Library Management System jwt_refresh_token_middleware.go JwtRefreshAuth neutralization for logs

A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been classified as problematic. Affected is the function JwtRefreshAuth of the file middleware/jwtrefreshtokenmiddleware.go. The manipulation of the argument Authorization leads to improper output neutralizatio...

CVE-2024-43986

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MagePeople Team Taxi Booking Manager for WooCommerce allows Stored XSS.This issue affects Taxi Booking Manager for WooCommerce: through 1.0.9...

PT-2024-30804

Name of the Vulnerable Software and Affected Versions Wpsoul Greenshift Woocommerce Addon versions prior to 1.9.8 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

CVE-2024-43936: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPDeveloper EmbedPress allows Stored XSS.This issue affects EmbedPress: from n/a through 4.0.8...

CVE-2024-43934: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Robert Felty Collapsing Archives allows Stored XSS.This issue affects Collapsing Archives: from n/a through 3.0.5...

CVE-2024-8297: Improper Output Neutralization for Logs

A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been classified as problematic. Affected is the function JwtRefreshAuth of the file middleware/jwtrefreshtokenmiddleware.go. The manipulation of the argument Authorization leads to improper output neutralizatio...

PT-2024-28226

Name of the Vulnerable Software and Affected Versions CridioStudio ListingPro versions 2.9.4 and earlier Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection, potentially exposin...

WordPress plugin Brickscore has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

CVE-2024-43918: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WBW WBW Product Table PRO allows SQL Injection.This issue affects WBW Product Table PRO: from n/a through 1.9.4...

CVE-2024-39638: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Roundup WP Registrations for the Events Calendar allows SQL Injection.This issue affects Registrations for the Events Calendar: from n/a through 2.12.2...

CVE-2024-43921: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Magic Post Thumbnail allows Reflected XSS.This issue affects Magic Post Thumbnail: from n/a through 5.2.9...

CVE-2024-43917: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in TemplateInvaders TI WooCommerce Wishlist allows SQL Injection.This issue affects TI WooCommerce Wishlist: from n/a through 2.8.2...