9175 matches found
CVE-2024-30519
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Lordicon Lordicon Animated Icons allows Stored XSS.This issue affects Lordicon Animated Icons: from n/a through 2.0.1...
CVE-2024-30520
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Labib Ahmed Carousel Anything For WPBakery Page Builder allows Stored XSS.This issue affects Carousel Anything For WPBakery Page Builder: from n/a through 2.1...
CVE-2024-30483
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Simple Sponsorships Sponsors allows Stored XSS.This issue affects Sponsors: from n/a through 3.5.1...
CVE-2024-30423
CVE-2024-30423 is an Stored XSS vulnerability in the WordPress plugin Better Elementor Addons, affecting versions from n/a up to 1.3.7. The initial description attributes the flaw to improper neutralization of input during web page generation. Red Hat’s entry provides the same description. The co...
CVE-2022-47153
CVE-2022-47153 : Reflected Cross-Site Scripting in the WPJobBoard Jobeleon Theme (affected: Jobeleon Theme from n/a through 1.9.1) due to improper input neutralization during web page generation. Red Hat and Wordfence references corroborate the vulnerability and its cross‑site scripting nature bu...
CVE-2024-30483
CVE-2024-30483 is a Stored XSS vulnerability in the Simple Sponsorships Sponsors (WordPress plugin) affecting Sponsors: from n/a through 3.5.1; corroborated by Red Hat CVE-2024-30483 entry with identical description. No public remediation details are provided in the connected documents.
CVE-2024-30503
CVE-2024-30503 is a reflected Cross‑Site Scripting vulnerability in the Mailster WordPress plugin (Mailster: from n/a through 4.0.6). According to NVD, impact is limited to confidentiality and integrity (C/L, I/L) with a network attack vector, requiring user interaction, and a scope change. CVSS ...
CVE-2024-30519 WordPress Lordicon Animated Icons plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Lordicon Lordicon Animated Icons allows Stored XSS.This issue affects Lordicon Animated Icons: from n/a through 2.0.1...
CVE-2024-30520 WordPress Carousel Anything For WPBakery Page Builder plugin <= 2.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Labib Ahmed Carousel Anything For WPBakery Page Builder allows Stored XSS.This issue affects Carousel Anything For WPBakery Page Builder: from n/a through 2.1...
CVE-2024-30520
CVE-2024-30520 : Stored XSS in Carousel Anything For WPBakery Page Builder (vulnerable up to and including 2.1). Root cause: improper input neutralization during web page generation. Impact: cross-site scripting exposure; exact affected products/versions limited to Carousel Anything For WPBakery ...
CVE-2023-6047 Reflected XSS in Algoritim E-commerce Software
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Algoritim E-commerce Software allows Reflected XSS. This issue affects E-commerce Software: before 3.9.2...
CVE-2023-6047
CVE-2023-6047 describes a Reflected XSS in Algoritim E-commerce Software (pre-3.9.2) caused by improper neutralization of user input during web page generation. Affected software is specified as Algoritim E-commerce Software before version 3.9.2. The primary impact is cross-site scripting, enabli...
PT-2024-23377 · Unknown · Booking Activities
Name of the Vulnerable Software and Affected Versions: Booking Activities versions 1.15.19 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can...
PT-2024-23370 · Unknown · Bold Page Builder
Name of the Vulnerable Software and Affected Versions: Bold Page Builder versions through 4.8.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...
PT-2024-23355 · Unknown · Contest Gallery
Name of the Vulnerable Software and Affected Versions: Contest Gallery versions n/a through 21.3.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can inje...
CVE-2023-6371 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions before 16.8.5, all versions starting from 16.9 before 16.9.3, all versions starting from 16.10 before 16.10.1. A wiki page with a crafted payload may lead to a Stored XSS, allowing attackers to perform arbitrary actions on behalf...
CVE-2024-28002
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Archetyped Cornerstone allows Reflected XSS.This issue affects Cornerstone: from n/a through 0.8.0...
CVE-2024-25599
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting.This issue affects Seriously Simple Podcasting: from n/a through = 3.0.2...