9175 matches found
CVE-2024-29927
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasTheme WishSuite allows Stored XSS.This issue affects WishSuite: from n/a through 1.3.7...
CVE-2024-29920
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Moveaddons Move Addons for Elementor allows Stored XSS.This issue affects Move Addons for Elementor: from n/a through 1.2.9...
CVE-2024-29922
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Quantum Cloud Slider Hero allows Stored XSS.This issue affects Slider Hero: from n/a through 8.6.1...
CVE-2024-29917
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Compact WP Audio Player allows Stored XSS.This issue affects Compact WP Audio Player: from n/a through 1.9.9...
CVE-2024-29919
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Photo Gallery Team Photo Gallery by Ays allows Reflected XSS.This issue affects Photo Gallery by Ays: from n/a through 5.5.2...
CVE-2024-29928
CVE-2024-29928 is a reflected XSS in WP Codeus Advanced Sermons (vulnerable component: Advanced Sermons plugin). Root cause: improper neutralization of user input during web page generation, enabling cross-site scripting. Affected versions: Advanced Sermons up to 3.1 (no details for vendor versio...
CVE-2024-29927
CVE-2024-29927 is a Stored XSS issue in the HasTheme WishSuite WordPress plugin, caused by improper neutralization of input during web page generation. Affects WishSuite versions from n/a to 1.3.7. Public details are limited in provided documents; remediation is not specified. The Red Hat entry m...
CVE-2024-29926
CVE-2024-29926 is linked to a Cross-Site Scripting flaw in HasThemes WC Builder (WordPress). The Red Hat entry confirms an improper input neutralization during web page generation, enabling stored XSS. Affected product: WC Builder up to version 1.0.18 (n/a through 1.0.18). The public documents do...
CVE-2024-29926 WordPress WC Builder plugin <= 1.0.18 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasThemes WC Builder allows Stored XSS.This issue affects WC Builder: from n/a through 1.0.18...
CVE-2024-29924
Technical details about CVE-2024-29924 (affected product, root cause, versions, exploits, and fixes) are not provided in the supplied documents. Monitor for updates.
CVE-2024-29923
Technical details for CVE-2024-29923 are not publicly provided in the supplied documents; no affected products, vectors, or fixes are described here. Monitor for official advisories.
CVE-2024-29922
CVE-2024-29922: Affected product is the Slider Hero WordPress plugin (Quantum Cloud Slider Hero). The issue is a Stored XSS caused by improper neutralization of input during web page generation, enabling injected scripts to persist in pages generated by Slider Hero (vulnerable up to 8.6.1). The c...
CVE-2024-30199
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Lab WP-Lister Lite for Amazon wp-lister-for-amazon.This issue affects WP-Lister Lite for Amazon: from n/a through = 2.6.8...
CVE-2024-30193
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Andy Moyle Church Admin allows Stored XSS.This issue affects Church Admin: from n/a through 4.1.17...
CVE-2024-30193
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through = 4.1.17...
CVE-2024-29913
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Tutor LMS Elementor Addons allows Stored XSS.This issue affects Tutor LMS Elementor Addons: from n/a through 2.1.3...
CVE-2024-29910
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alordiel Dropdown Multisite selector allows Stored XSS.This issue affects Dropdown Multisite selector: from n/a through 0.9.2...
CVE-2024-29820
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RedNao PDF Builder for WPForms allows Stored XSS.This issue affects PDF Builder for WPForms: from n/a through 1.2.88...
CVE-2024-27188
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cloudways Breeze breeze.This issue affects Breeze: from n/a through = 2.1.3...
CVE-2024-29921
Public details about CVE-2024-29921 are not provided in the connected documents. Technical specifics (exploit methods, affected versions beyond what’s listed, fix/mitigation) are not present here. Monitor for official advisories or vendor updates.