Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eDoc Intelligence eDoc Employee Job Application – Best WordPress Job Manager for Employees allows Reflected XSS.This issue affects eDoc Employee Job Application – Best WordPress Job Manager for...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Akhtarujjaman Shuvo Bootstrap Shortcodes Ultimate allows Stored XSS.This issue affects Bootstrap Shortcodes Ultimate: from n/a through 4.3.1...

CVE-2023-41136

CVE-2023-41136 is a stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Simple Long Form (aka OhMyBox.Info Simple Long Form). Affected versions are listed as

CVE-2023-41136 WordPress Simple Long Form Plugin <= 2.2.2 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Laurence/OhMyBox.Info Simple Long Form allows Stored XSS.This issue affects Simple Long Form: from n/a through 2.2.2...

CVE-2023-47505

CVE-2023-47505 affects Elementor Website Builder (WordPress plugin)

CVE-2023-47505 WordPress Elementor Website Builder Plugin <= 3.16.4 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Elementor.Com Elementor allows Cross-Site Scripting XSS.This issue affects Elementor: from n/a through 3.16.4...

CVE-2023-47777

CVE-2023-47777 is a Stored XSS flaw in Automattic WooCommerce and WooCommerce Blocks, caused by improper neutralization of input during web page generation. Affected: WooCommerce versions through 8.1.1 and WooCommerce Blocks through 11.1.1. The issue is an authenticated Cross-Site Scripting vulne...

CVE-2023-47851 WordPress Bootstrap Shortcodes Ultimate Plugin <= 4.3.1 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Akhtarujjaman Shuvo Bootstrap Shortcodes Ultimate allows Stored XSS.This issue affects Bootstrap Shortcodes Ultimate: from n/a through 4.3.1...

CVE-2023-47854

CVE-2023-47854 affects the Parallax Image WordPress plugin (versions

CVE-2023-48326 WordPress Events Manager Plugin <= 6.4.5 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pixelite Events Manager allows Reflected XSS.This issue affects Events Manager: from n/a through 6.4.5...

CVE-2023-48743

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paul Menard Simply Exclude allows Reflected XSS.This issue affects Simply Exclude: from n/a through 2.0.6.6...

CVE-2023-48737

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PT Trijaya Digital Grup TriPay Payment Gateway allows Stored XSS.This issue affects TriPay Payment Gateway: from n/a through 3.2.7...

CVE-2023-48737

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PT Trijaya Digital Grup TriPay Payment Gateway allows Stored XSS.This issue affects TriPay Payment Gateway: from n/a through 3.2.7...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cybernetikz Easy Social Icons allows Stored XSS.This issue affects Easy Social Icons: from n/a through 3.2.4...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PT Trijaya Digital Grup TriPay Payment Gateway allows Stored XSS.This issue affects TriPay Payment Gateway: from n/a through 3.2.7...

CVE-2023-48743

CVE-2023-48743 affects the WordPress plugin Simply Exclude (vulnerable up to 2.0.6.6). It is described as a Reflected Cross-Site Scripting vulnerability caused by improper input neutralization during web page generation. The CVE originates from multiple sources (Wordfence, NVD, CVE list, Patchsta...

PT-2023-7420 · Schweitzer Engineering Laboratories · Sel-411L

Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories SEL-411L affected versions not specified Description: The issue is related to improper neutralization of input during web page generation, which could allow an attacker to generate cross-site scripting base...

PT-2023-27596 · Yoast · Yoast Seo

Name of the Vulnerable Software and Affected Versions: Yoast SEO versions prior to 21.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into the website,...

PT-2023-27592 · Unknown · Lasso Simple Urls

Name of the Vulnerable Software and Affected Versions: Lasso Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management versions n/a through 118 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting...

PT-2023-26407 · Enfold · Enfold

Name of the Vulnerable Software and Affected Versions: Enfold - Responsive Multi-Purpose Theme versions n/a through 5.6.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS...