PT-2024-25979 · Unknown · Counter Up

Name of the Vulnerable Software and Affected Versions: Counter Up versions through 2.2.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means that an attacker can inject maliciou...

PT-2024-25960 · Unknown · Habibcoder Sticky Social Link

Name of the Vulnerable Software and Affected Versions: HabibCoder Sticky Social Link versions n/a through 1.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means that an...

PT-2024-25987 · Themegrill · Themegrill Himalayas

Name of the Vulnerable Software and Affected Versions: ThemeGrill Himalayas versions 1.3.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, allowing stored cross-site scripting XSS. This means that an attacker can inject malicious scrip...

PT-2024-25980 · Unknown · Debug Info

Name of the Vulnerable Software and Affected Versions: Debug Info versions through 1.3.10 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means that an attacker can inject malicio...

CVE-2024-34390

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AddonMaster Post Grid Master allows Stored XSS.This issue affects Post Grid Master: from n/a through 3.4.8...

CVE-2024-34376

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Theme Freesia Edge allows Stored XSS.This issue affects Edge: from n/a through 2.0.9...

CVE-2024-34375

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPPOOL Sheets To WP Table Live Sync allows Stored XSS.This issue affects Sheets To WP Table Live Sync: from n/a through 3.7.0...

CVE-2024-34369

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webpushr Web Push Notifications Webpushr allows Reflected XSS.This issue affects Webpushr: from n/a through 4.35.0...

CVE-2024-34366

CVE-2024-34366: Stored XSS in Alt Text AI WordPress plugin. Root cause: improper input neutralization during web page generation. Affected: Alt Text AI Download Alt Text AI (versions up to 1.3.4). Existence of connected claim shows a patched status for the vulnerability in the plugin beyond 1.3.4...

CVE-2024-34374

CVE-2024-34374 is a Stored Cross-Site Scripting (XSS) vulnerability in QuomodoSoft ElementsReady Addons for Elementor. The issue affects ElementsReady Addons for Elementor releases up to 5.8.0 (inclusive). Red Hat’s advisory corroborates the same description. Public references list this CVE under...

CVE-2024-34375

CVE-2024-34375 involves WPPOOL Sheets To WP Table Live Sync (WordPress plugin). The Red Hat entry confirms improper input neutralization during web page generation leading to Stored XSS, exploitable by authenticated users (admin context) after viewing crafted content. The vulnerability affects Sh...

CVE-2024-34380 WordPress ChatBot Conversational Forms plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuantumCloud Conversational Forms for ChatBot allows Stored XSS.This issue affects Conversational Forms for ChatBot: from n/a through 1.2.0...

CVE-2024-34381 WordPress PropertyHive plugin <= 2.0.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PropertyHive allows Stored XSS.This issue affects PropertyHive: from n/a through 2.0.10...

CVE-2024-34390

CVE-2024-34390 is a stored XSS in WordPress plugin Post Grid Master (Ajax Filter Everything) that affects Post Grid Master versions up to 3.4.8 (and from n/a through 3.4.8). The issue arises from improper input neutralization during web page generation. The vulnerability has a CVSS v3.1 base scor...

PT-2024-25832 · Unknown · The Plus Addons For Elementor Page Builder

Name of the Vulnerable Software and Affected Versions: The Plus Addons for Elementor Page Builder Lite versions through 5.4.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means...

PT-2024-25824 · Unknown · Download Alt Text Ai

Name of the Vulnerable Software and Affected Versions: Download Alt Text AI versions 1.3.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in Download Alt Text AI...

CVE-2024-33926

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Karl Kiesinger GWP-Histats allows Stored XSS.This issue affects GWP-Histats: from n/a through 1.0...

CVE-2024-33927

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Team GIPHY Giphypress allows Stored XSS.This issue affects Giphypress: from n/a through 1.6.2...

CVE-2024-32831

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Lorna Timbah webgrrrl Accessibility Widget allows Stored XSS.This issue affects Accessibility Widget: from n/a through 2.2...

CVE-2024-33916

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MachoThemes CPO Companion allows Stored XSS.This issue affects CPO Companion: from n/a through 1.1.0...