CVE-2024-37537

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in UusWeb.Ee WS Contact Form allows Stored XSS.This issue affects WS Contact Form: from n/a through 1.3.7...

CVE-2024-37515

CVE-2024-37515 is a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin XPlainer – Product FAQs for WooCommerce (XPlainer – WooCommerce Product FAQ). Affected versions are 1.6.3 and earlier. The issue arises from improper neutralization of input during web page generation, ...

CVE-2024-37519

The CVE-2024-37519 entry concerns Leap13 Premium Blocks – Gutenberg Blocks for WordPress (Premium Blocks) with a Stored XSS vulnerability due to improper neutralization of input during web page generation. Affected versions: 2.1.27 and earlier. The issue is a Cross Site Scripting vulnerability in...

CVE-2024-37521

CVE-2024-37521 describes a Stored XSS vulnerability in the WordPress theme zBench, affecting version 1.4.2 and earlier (no patch information provided in the supplied documents). The description specifies Improper Neutralization of Input During Web Page Generation as the root cause, enabling store...

CVE-2024-37523

The CVE-2024-37523 issue targets the AMP-MODE Login Logo Editor with Stored XSS due to improper input handling. Affected: Login Logo Editor versions up to 1.3.3. Root cause: improper neutralization of input during web page generation. Exploitation specifics are not provided in the core documents;...

CVE-2024-37545

CVE-2024-37545 (Floating Social Media Links) is a Stored XSS in the WordPress plugin. Affected: versions

CVE-2024-37551

CVE-2024-37551 is a Stored XSS in WordPress plugin Simple Social Share (Perials) via improper input neutralization during page generation. Affected: Simple Social Share versions n/a through 3.0. Impact: stored XSS as described; exploitation details not provided in connected documents. Public deta...

CVE-2024-37559

Counterpoint WordPress theme vulnerability (CVE-2024-37559): Reflected XSS due to improper input neutralization during web page generation. Affected: Counterpoint theme in versions n/a through 1.8.1. Impact is described as Reflected XSS; exploitation details are not provided in the sources. Remed...

PT-2024-28218 · Jegstudio · Jegstudio Gutenverse

Name of the Vulnerable Software and Affected Versions: Jegstudio Gutenverse versions 1.9.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For...

PT-2024-27656

Name of the Vulnerable Software and Affected Versions WPFavicon versions 2.1.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations For versions 2.1....

PT-2024-28219

Name of the Vulnerable Software and Affected Versions CoziPress versions 1.0.30 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations For CoziPress...

CVE-2024-37515: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Optemiz XPlainer - WooCommerce Product FAQ allows Reflected XSS.This issue affects XPlainer - WooCommerce Product FAQ: from n/a through 1.6.3...

CVE-2024-37492: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Gutenberg Team Gutenberg allows Stored XSS.This issue affects Gutenberg: from n/a through 18.6.0...

CVE-2024-37559: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Echenley Counterpoint allows Reflected XSS.This issue affects Counterpoint: from n/a through 1.8.1...

CVE-2024-37538: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Thomas Kuhlmann Link To Bible allows Stored XSS.This issue affects Link To Bible: from n/a through 2.5.9...

PT-2024-28002 · Commugen · Commugen Sox 365

Name of the Vulnerable Software and Affected Versions: Commugen SOX 365 affected versions not specified Description: The issue is related to improper neutralization of input during web page generation, which can lead to cross-site scripting. Recommendations: At the moment, there is no information...

PT-2024-27619 · Artistscope · Artistscope Copysafe Web Protection

Name of the Vulnerable Software and Affected Versions: ArtistScope CopySafe Web Protection versions 3.14 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...

PT-2024-27655

Name of the Vulnerable Software and Affected Versions WP Cookie Law Info versions 1.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations For WP...

CVE-2024-38782: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MapsMarker.Com e.U. Leaflet Maps Marker allows Stored XSS.This issue affects Leaflet Maps Marker: from n/a through 3.12.9...

CVE-2024-37446: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Kiboko Labs Chained Quiz allows Stored XSS.This issue affects Chained Quiz: from n/a through 1.3.2.8...