CVE-2024-35758

CVE-2024-35758 is a Stored XSS in the WordPress Theme Interface (Interface) up to version 3.1.0. The Wordfence entry describes improper input neutralization during web page generation and confirms patching (patched) in the Interface theme. Connected Red Hat advisory repeats the same CVE descripti...

CVE-2024-35760 WordPress WP Job Portal plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpjobportal WP Job Portal wp-job-portal allows DOM-Based XSS.This issue affects WP Job Portal: from n/a through = 2.1.3...

CVE-2024-35761 WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.4.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in vCita Online Booking & Scheduling Calendar for WordPress by vcita allows Stored XSS.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through 4.4.0...

CVE-2024-35761 WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.4.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in vCita Online Booking & Scheduling Calendar for WordPress by vcita allows Stored XSS.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through 4.4.0...

CVE-2024-35761

CVE-2024-35761 affects the WordPress plugin “Online Booking & Scheduling Calendar for WordPress by vcita” and its vulnerable range extends to version 4.4.0. The issue is described as Stored Cross‑Site Scripting caused by improper neutralization of input during web page generation. Remediation: up...

CVE-2024-35763

CVE-2024-35763 is a stored XSS vulnerability in the Theme Freesia Excellent. Affected: Excellent versions up to 1.2.9. Cause: improper neutralization of input during web page generation. Status: patched in the Wordfence entry; remediation is to upgrade to the patched version (1.2.9 or later) or a...

CVE-2024-35766

The CVE-2024-35766 entry concerns a reflected XSS in the WPPizza WordPress plugin (WPPizza – A Restaurant Plugin) allowing input that is not properly neutralized during web page generation. Affected versions are

CVE-2024-35766 WordPress WPPizza – A Restaurant Plugin plugin <= 3.18.13 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ollybach WPPizza allows Reflected XSS.This issue affects WPPizza: from n/a through 3.18.13...

CVE-2024-35768

CVE-2024-35768 corresponds to a Stored XSS in the Live Composer Page Builder (Live Composer) for WordPress. Publicly documented impact notes indicate the vulnerability affects Page Builder: Live Composer versions up to 1.5.42, with fixes in later releases (patched in 1.5.44 per related advisories...

CVE-2024-5058

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPDeveloper Typing Text allows Stored XSS.This issue affects Typing Text: from n/a through 1.2.5...

CVE-2024-35769

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in John West Slideshow SE allows Stored XSS.This issue affects Slideshow SE: from n/a through 2.5.17...

CVE-2024-35774

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in D’arteweb DImage 360 allows Stored XSS.This issue affects DImage 360: from n/a through 2.0...

CVE-2024-35769

CVE-2024-35769 is a stored XSS vulnerability affecting the WordPress plugin Slideshow SE. The connected Wordfence vulnerability data indicates Slideshow SE versions up to 2.5.20 (likely including 2.5.17) are impacted with authenticated (Author+) access. The description in the Initial document not...

CVE-2024-35774

CVE-2024-35774: Stored XSS in D’arteweb DImage 360 (DImage 360) due to improper neutralization of input during web page generation; affects DImage 360 versions up to 2.0. The issue is a stored cross-site scripting vulnerability; the root cause is incorrect handling of user input in page rendering...

CVE-2024-5058

CVE-2024-5058 is a WordPress Typing Text plugin vulnerability classified as Stored XSS due to Improper Neutralization of Input During Web Page Generation. Affected: Typing Text versions from n/a up to 1.2.5. Reported impact is Stored XSS; no exploit specifics or vectors are provided in the docume...

CVE-2024-6179 XSS vulnerability in LG SuperSign CMS

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSign CMS: from 4.1.3 before 4.3.1...

CVE-2024-6179 XSS vulnerability in LG SuperSign CMS

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSign CMS: from 4.1.3 before 4.3.1...

CVE-2024-6178 XSS vulnerability in LG SuperSign CMS

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSign CMS: from 4.1.3 before 4.3.1...

CVE-2024-6177 XSS vulnerability in LG SuperSign CMS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSign CMS: from 4.1.3 before 4.3.1...

CVE-2024-6177 XSS vulnerability in LG SuperSign CMS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSign CMS: from 4.1.3 before 4.3.1...