9191 matches found
CVE-2024-34547
CVE-2024-34547 is a Stored XSS vulnerability in Magical Addons For Elementor for WordPress. Affected versions are from n/a through 1.1.34. Root cause: Improper neutralization of input during web page generation, enabling injection that persists in stored content. Impact: stored cross-site scripti...
CVE-2024-34548
CVE-2024-34548 is a Stored XSS in Themesgrove WidgetKit (WidgetKit for Elementor). Affected: WidgetKit versions up to 2.4.8. Root cause: improper neutralization of input during web page generation. Impact: stored cross-site scripting vesting on pages using the widget. Remediation: patch/upgrade t...
CVE-2024-34568
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeqx LetterPress allows Stored XSS.This issue affects LetterPress: from n/a through 1.2.1...
CVE-2024-34570
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xpro Xpro Elementor Addons allows Stored XSS.This issue affects Xpro Elementor Addons: from n/a through 1.4.3...
CVE-2024-34562
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Moveaddons Move Addons for Elementor allows Stored XSS.This issue affects Move Addons for Elementor: from n/a through 1.3.0...
CVE-2024-34563
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GoldAddons Gold Addons for Elementor allows Stored XSS.This issue affects Gold Addons for Elementor: from n/a through 1.2.9...
CVE-2024-34561 WordPress Real3D Flipbook PDF Viewer Lite plugin <= 3.71 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative interactive media 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin allows Stored XSS.This issue affects 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook...
CVE-2024-34561 WordPress Real3D Flipbook PDF Viewer Lite plugin <= 3.71 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative interactive media 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin allows Stored XSS.This issue affects 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook...
CVE-2024-34561
CVE-2024-34561 affects the Real 3D FlipBook WordPress Plugin family (3D FlipBook, PDF Viewer, PDF Embedder). Connected data confirms a Stored Cross-Site Scripting vulnerability in 3D FlipBook
CVE-2024-34562 WordPress Move Addons for Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Moveaddons Move Addons for Elementor allows Stored XSS.This issue affects Move Addons for Elementor: from n/a through 1.3.0...
CVE-2024-34563 WordPress Gold Addons for Elementor plugin <= 1.2.9 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GoldAddons Gold Addons for Elementor allows Stored XSS.This issue affects Gold Addons for Elementor: from n/a through 1.2.9...
CVE-2024-34566
CVE-2024-34566 is a Stored XSS in Content Blocks (Custom Post Widget) for WordPress. The issue arises from improper input neutralization during web page generation. Affected: Content Blocks (Custom Post Widget)
CVE-2024-34568
CVE-2024-34568 affects the WordPress LetterPress Newsletter plugin, versions <= 1.2.1. Root cause: Improper neutralization of input during web page generation, leading to Stored XSS. Impact is documented as Cross-Site Scripting with low CVSS v3.1 base score (5.9) and low overall severity; expl...
CVE-2024-34569
CVE-2024-34569 describes a stored Cross‑Site Scripting (XSS) vulnerability in the Zotpress WordPress plugin. The issue is caused by improper neutralization of input during web page generation, allowing stored XSS in Zotpress versions up to 7.3.9. Public references in the provided documents confir...
CVE-2024-34572
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemePrix Fancy Elementor Flipbox fancy-elementor-flipbox allows Stored XSS.This issue affects Fancy Elementor Flipbox: from n/a through 2.4.2...
CVE-2024-34571
CVE-2024-34571 corresponds to ThemeGrill Himalayas, a WordPress theme. Public records show an Authenticated Stored XSS in Himalayas up to version 1.3.0 due to improper input neutralization during web page generation. The risk is described as stored XSS with authenticated access (Contributor+). Re...
CVE-2024-34574
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wpsoul Table Maker allows Stored XSS.This issue affects Table Maker: from n/a through 1.9.1...
CVE-2024-34572
The CVE-2024-34572 entry concerns the WordPress plugin Fancy Elementor Flipbox (ThemePrix Fancy Elementor Flipbox). Affected component: the plugin’s input handling in web page generation, leading to Stored Cross-Site Scripting (XSS). Impact is described as Stored XSS with low severity metrics (CV...
CVE-2024-34574
CVE-2024-34574 concerns the WordPress plugin Table Maker. The vulnerability is a Stored Cross-Site Scripting (XSS) flaw arising from improper input neutralization during web page generation, affecting Table Maker versions from 0 through 1.9.1. The entry notes an authenticated attack requirement (...
PT-2024-25978 · Elementor · Gold Addons For Elementor
Name of the Vulnerable Software and Affected Versions: Gold Addons for Elementor versions 1.2.9 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This could potentially...