CVE-2024-56018 WordPress BU Section Editing Plugin <= 0.9.9 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Boston University IS&T BU Section Editing allows Reflected XSS.This issue affects BU Section Editing: from n/a through 0.9.9...

CVE-2024-56037

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SoftClever Limited User Referral user-referral-free allows Reflected XSS.This issue affects User Referral: from n/a through = 8.0...

CVE-2024-56069

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Reflected XSS.This issue affects WP SuperBackup: from n/a through = 2.3.3...

CVE-2024-56035

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kurt Payne Upload Scanner upload-scanner allows Reflected XSS.This issue affects Upload Scanner: from n/a through = 1.2...

CVE-2024-56036

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ondrej Donek odPhotogallery od-photogallery-plugin allows Reflected XSS.This issue affects odPhotogallery: from n/a through = 0.5.3...

CVE-2024-56060

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Link Software LLC HTML Forms html-forms allows Reflected XSS.This issue affects HTML Forms: from n/a through = 1.4.1...

CVE-2024-56029

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dreamwinner Easy Language Switcher easy-language-switcher allows Reflected XSS.This issue affects Easy Language Switcher: from n/a through = 1.0...

CVE-2024-56030

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Carver Lab 10CentMail 10centmail-subscription-management-and-analytics allows Reflected XSS.This issue affects 10CentMail: from n/a through = 2.1.50...

CVE-2024-56034

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Irshad A.Khan Services updates for customers service-updates-for-customers allows Reflected XSS.This issue affects Services updates for customers: from n/a through = 1.0...

CVE-2024-56033

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Think201 FAQs faqs allows Reflected XSS.This issue affects FAQs: from n/a through = 1.0.2...

CVE-2024-56027

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bizswoop Leads CRM leads-crm allows Reflected XSS.This issue affects Leads CRM: from n/a through = 2.0.13...

CVE-2024-56032

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FolioVision FV Descriptions fv-descriptions allows Reflected XSS.This issue affects FV Descriptions: from n/a through = 1.4...

CVE-2024-56027 WordPress Leads CRM plugin <= 2.0.13 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bizswoop Leads CRM leads-crm allows Reflected XSS.This issue affects Leads CRM: from n/a through = 2.0.13...

CVE-2024-56027

CVE-2024-56027 is a Reflected XSS vulnerability in Leads CRM (WordPress plugin for Leads CRM). Affected software: Leads CRM for WordPress WooCommerce, from n/a through 2.0.13 (i.e., up to 2.0.13). The description and Red Hat ENISA entries confirm the issue as a cross-site scripting flaw with affe...

CVE-2024-56028

CVE-2024-56028 is a Reflected XSS in the Lemonade Social Networks Autoposter Pinterest WordPress plugin. Affected: Lemonade SNA Pinterest edition up to version 2.0 (from n/a through 2.0). Root cause: improper neutralization of input during web page generation. Impact: allows attacker to inject sc...

CVE-2024-56029 WordPress Easy Language Switcher plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dreamwinner Easy Language Switcher allows Reflected XSS.This issue affects Easy Language Switcher: from n/a through 1.0...

CVE-2024-56030

CVE-2024-56030 is a Reflected Cross-Site Scripting vulnerability in the WordPress plugin 10CentMail, affecting versions from n/a up to 2.1.50. Public documentation confirms the issue and that it remains unpatched; no vendor-supplied fix is listed in the connected documents. The description and re...

CVE-2024-56033 WordPress FAQs plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Think201 FAQs faqs allows Reflected XSS.This issue affects FAQs: from n/a through = 1.0.2...

CVE-2024-56035 WordPress Upload Scanner plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kurt Payne Upload Scanner allows Reflected XSS.This issue affects Upload Scanner: from n/a through 1.2...

CVE-2024-56035

CVE-2024-56035 — The connected sources indicate an XSS vulnerability in the WordPress plugin Upload Scanner (CVE-2024-56035). The entry describes an improper neutralization of input during web page generation that allows Reflected XSS. Affected software: Upload Scanner, versions up to 1.2 (from n...