CVE-2024-31349

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MailMunch MailMunch – Grow your Email List allows Stored XSS.This issue affects MailMunch – Grow your Email List: from n/a through 3.1.6...

CVE-2024-31346

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Blocksmarket Gradient Text Widget for Elementor allows Stored XSS.This issue affects Gradient Text Widget for Elementor: from n/a through 1.0.1...

CVE-2024-31344

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Phpbits Creative Studio Easy Login Styler – White Label Admin Login Page for WordPress allows Stored XSS.This issue affects Easy Login Styler – White Label Admin Login Page for WordPress: from n/a...

CVE-2024-31258

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Micro.Company Form to Chat App allows Stored XSS.This issue affects Form to Chat App: from n/a through 1.1.6...

CVE-2024-31236

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Royal Royal Elementor Addons allows Stored XSS.This issue affects Royal Elementor Addons: from n/a through 1.3.93...

CVE-2024-31255

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ELEXtensions ELEX WooCommerce Dynamic Pricing and Discounts allows Reflected XSS.This issue affects ELEX WooCommerce Dynamic Pricing and Discounts: from n/a through 2.1.2...

CVE-2024-31257

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Formsite Formsite | Embed online forms to collect orders, registrations, leads, and surveys allows Stored XSS.This issue affects Formsite | Embed online forms to collect orders, registrations, lead...

CVE-2024-31236

CVE-2024-31236 is a Stored XSS vulnerability in WP Royal Elementor Addons (and Templates) affecting versions up to 1.3.93, arising from improper input neutralization during web page generation. The Royal Elementor Addons entry is corroborated by Red Hat and Wordfence data, which label the issue a...

CVE-2024-31255

CVE-2024-31255 affects the ELEX WooCommerce Dynamic Pricing and Discounts WordPress plugin. The connected data confirms a Reflected XSS due to Improper Neutralization of Input During Web Page Generation, impacting versions up to 2.1.2 (n/a–2.1.2). The CVE entry provides a CVSS score of 7.1 (HIGH,...

CVE-2024-31256

CVE-2024-31256 is a Reflected XSS in the WordPress WebinarPress (WP Webinar System) plugin. Affected: WebinarPress versions up to 1.33.10. Root cause: improper neutralization of input during web page generation. Impact: potential disclosure/remote script execution via crafted input (low to modera...

CVE-2024-31306 WordPress Essential Blocks plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Stored XSS.This issue affects Essential Blocks for Gutenberg: from n/a through 4.5.3...

CVE-2024-31306 WordPress Essential Blocks plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Stored XSS.This issue affects Essential Blocks for Gutenberg: from n/a through 4.5.3...

CVE-2024-31346

CVE-2024-31346 concerns the Gradient Text Widget for Elementor. The connected document details a Stored Cross-Site Scripting (XSS) vulnerability due to improper input neutralization during web page generation, affecting Gradient Text Widget for Elementor versions up to 1.0.1. Exploitation require...

CVE-2024-31348

The CVE-2024-31348 entry corresponds to a Stored XSS in Themepoints Testimonials (WordPress) affecting the Testimonials plugin up to version 3.0.5. Public remediation is available: patches exist and the CVE is listed as patched in Wordfence/WP advisories, indicating a fix is released (3.0.5). If ...

PT-2024-23901 · Micro.Company · Micro.Company Form To Chat App

Name of the Vulnerable Software and Affected Versions: Micro.Company Form to Chat App versions 1.1.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in the Micro.Company Fo...

CVE-2024-31103

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kanban for WordPress Kanban Boards for WordPress allows Reflected XSS.This issue affects Kanban Boards for WordPress: from n/a through 2.5.21...

CVE-2024-31091

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SparkWeb Interactive, Inc. Custom Field Bulk Editor allows Reflected XSS.This issue affects Custom Field Bulk Editor: from n/a through 1.9.1...

CVE-2024-31092

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Philip M. Hofer Frumph Comic Easel allows Reflected XSS.This issue affects Comic Easel: from n/a through 1.15...

CVE-2024-31097

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stephan Spencer SEO Title Tag allows Reflected XSS.This issue affects SEO Title Tag: from n/a through 3.5.9...

CVE-2024-31090

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 荒野无灯 Hacklog Down As PDF allows Reflected XSS.This issue affects Hacklog Down As PDF: from n/a through 2.3.6...