CVE-2024-38671 WordPress WP GoToWebinar plugin <= 15.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Martin Gibson WP GoToWebinar allows Stored XSS.This issue affects WP GoToWebinar: from n/a through 15.7...

CVE-2024-38671

CVE-2024-38671 is a stored XSS vulnerability in the WordPress WP GoToWebinar plugin (Improp er Neutralization of Input During Web Page Generation). It affects WP GoToWebinar versions up to 15.7 (vendor/exploit context lists n/a through 15.7) and is confirmed across multiple sources (NVD/Red Hat/W...

CVE-2024-38673

CVE-2024-38673 concerns the WordPress plugin “Multisite Content Copier/Updater.” The connected records describe an Reflect ed XSS due to Improper Neutralization of Input During Web Page Generation. Affected versions are indicated as “from n/a through 1.5.0.” The CVSS metrics shown (base score 7.1...

CVE-2024-38674 WordPress SKT Addons for Elementor plugin <= 3.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in SKT Themes SKT Addons for Elementor allows Stored XSS.This issue affects SKT Addons for Elementor: from n/a through 3.0...

CVE-2024-38674 WordPress SKT Addons for Elementor plugin <= 3.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in SKT Themes SKT Addons for Elementor allows Stored XSS.This issue affects SKT Addons for Elementor: from n/a through 3.0...

CVE-2024-38675

CVE-2024-38675 is an Arkhe Blocks (WordPress) vulnerability: improper input neutralization enabling Stored XSS in Arkhe Blocks versions up to 2.22.1. Exploitation details are not provided in the sources; remediation/fix version is not clearly stated. Patch status in the materials is not definitiv...

CVE-2024-38676 WordPress Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Booking Ultra Pro allows Stored XSS.This issue affects Booking Ultra Pro: from n/a through 1.1.13...

CVE-2024-38677

REVIEWS.io for WordPress plugin (REVIEWS.IO for WooCommerce)

CVE-2024-38678 WordPress Calendar.online / Kalender.digital – Plugin plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Calendar.Online Calendar.Online / Kalender.Digital allows Stored XSS.This issue affects Calendar.Online / Kalender.Digital: from n/a through 1.0.8...

CVE-2024-38679

CVE-2024-38679 is a stored XSS in the WordPress plugin Animated Typed JS Shortcode (vulnerable: n/a through 2.0; vulnerability type: Improper neutralization of input during web page generation). The issue is authenticated (Contributor+) and affects the plugin’s Shortcode rendering path. Public so...

CVE-2024-38681

CVE-2024-38681 : Stored XSS in Magical Addons For Elementor (WordPress plugin). Root cause: Improper neutralization of input during web page generation. Affected: Magical Addons For Elementor

CVE-2024-38682

CVE-2024-38682: Stored XSS in Techeshta Post Layouts for Gutenberg (Post Layouts for Gutenberg) plugin, affected versions 1.2.7 and earlier. The vulnerability arises from improper input neutralization during web page generation. Impact is Stored XSS, enabling an attacker to inject arbitrary HTML/...

CVE-2024-38686 WordPress FancyPost plugin <= 5.3.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Pluginic FancyPost – Best Ultimate Post Block, Post Grid, Layouts, Carousel, Slider For Gutenberg & Elementor allows Stored XSS.This issue affects FancyPost – Best Ultimate Post Block, Post...

CVE-2024-38689

CVE-2024-38689 is a stored XSS in the WordPress plugin Simple Popup by Garrett Grimm, affecting the plugin version range “from n/a through 4.4.” The root cause cited is improper neutralization of input during web page generation. The connected docs reiterate the vulnerability class and affected p...

CVE-2024-38696 WordPress Zoho CRM Lead Magnet plugin <= 1.7.8.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Zoho CRM Zoho CRM Lead Magnet allows Reflected XSS.This issue affects Zoho CRM Lead Magnet: from n/a through 1.7.8.8...

CVE-2024-38697

CVE-2024-38697 is a Stored XSS in the WordPress plugin Goftino (vulnerable: Goftino up to 1.6). The underlying issue is improper neutralization of input during web page generation , enabling stored malicious scripts when data is processed for display. Affected software is the WordPress Goftino pl...

CVE-2024-38712

CVE-2024-38712 affects Qode Interactive Qi Blocks (WordPress) up to version 1.3. The issue is a Stored XSS caused by improper input neutralization during web page generation, allowing attacker-supplied script to be stored and later executed in users’ browsers. Exploitation details and patch/versi...

CVE-2024-38713

CVE-2024-38713 is an authenticated stored XSS vulnerability in WordPress WP Photo Album Plus up to version 8.8.02.002. The CVE entry confirms an authenticated stored cross-site scripting flaw in WP Photo Album Plus, affecting the plugin as installed on affected sites. The connected Red Hat/NTD re...

CVE-2024-38718 WordPress Download Button for Elementor plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in clicklabs® Medienagentur Download Button for Elementor allows Stored XSS.This issue affects Download Button for Elementor: from n/a through 1.2.1...

CVE-2024-38720 WordPress EazyDocs plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in EazyDocs eazydocs allows Stored XSS.This issue affects EazyDocs: from n/a through 2.5.0...