CVE-2024-54341

CVE-2024-54341 affects LabelGrid Tools (LabelGrid Tools plugin) up to version 1.3.58, with an Improper Neutralization of Input During Web Page Generation leading to Reflected XSS. Connected sources confirm the issue and indicate a patched state; exploitation details are not provided in the suppli...

CVE-2024-54340

CVE-2024-54340 is a reflected Cross‑Site Scripting vulnerability in the WordPress plugin Simple Presenter (Sylvia van Os Simple Presenter). Affected versions are listed as up to 1.5.1 (from n/a through 1.5.1). The issue arises from improper neutralization of input during web page generation, allo...

CVE-2024-54339 WordPress geoFlickr plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jbd7 geoFlickr allows Reflected XSS.This issue affects geoFlickr: from n/a through 1.3...

CVE-2024-54340 WordPress Simple Presenter plugin <= 1.5.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sylvia van Os Simple Presenter allows Reflected XSS.This issue affects Simple Presenter: from n/a through 1.5.1...

CVE-2024-54335 WordPress ImmoToolBox Connect plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ImmoSoft ImmoToolBox Connect immotoolbox-connect allows Reflected XSS.This issue affects ImmoToolBox Connect: from n/a through = 1.3.3...

CVE-2024-54333

CVE-2024-54333 is a reflected XSS in the WordPress plugin “Check Pincode For Woocommerce” (silverplugins217). Affected versions are up to 1.1. The vulnerability is exploitable over local/remote network with no authentication, but requires user interaction, and can affect confidentiality, integrit...

CVE-2024-54333 WordPress Check Pincode For Woocommerce plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in silverplugins217 Check Pincode For Woocommerce allows Reflected XSS.This issue affects Check Pincode For Woocommerce: from n/a through 1.1...

CVE-2024-54329

CVE-2024-54329 corresponds to a Reflected XSS in CleverNode Related Content (WordPress plugin by CleverNode) that affects CleverNode Related Content versions up to 1.1.5. The issue arises from improper neutralization of input during web page generation. The CVE entry notes a CVSS v3.1 base score ...

CVE-2024-54328 WordPress Invoice Payment for WooCommerce plugin <= 1.7.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in linknacional Invoice Payment for WooCommerce invoice-payment-for-woocommerce allows Reflected XSS.This issue affects Invoice Payment for WooCommerce: from n/a through = 1.7.2...

CVE-2024-54328

CVE-2024-54328 (Invoice Payment for WooCommerce) is a Reflected XSS vulnerability in the WordPress plugin Invoice Payment for WooCommerce. Public details in connected sources confirm the issue arises from improper input neutralization during web page generation and affects versions up to 1.7.2. T...

CVE-2024-54327

CVE-2024-54327 is a reflected cross-site scripting vulnerability in the UNIVERSAM product. The issue stems from improper input neutralization during web page generation, enabling an attacker to cause XSS when a user loads a crafted URL. According to the provided CVSS data, the baseline is CVSS v3...

CVE-2024-54325

CVE-2024-54325 is a reflected cross-site scripting vulnerability in CarDealerPress (DealerTrend) that allows an attacker to inject malicious input which is reflected in the web page. The issue is caused by improper neutralization of input during web page generation, enabling likely an XSS payload...

CVE-2024-54324

CVE-2024-54324 – Reflected Cross-Site Scripting in SMSify (Cloud Inn). The vulnerability arises from improper input neutralization during web page generation, enabling attacker-controlled input to be reflected in the page. Affected: SMSify versions up to 6.0.4 (exact product naming in source). CV...

CVE-2024-54320

CVE-2024-54320: Reflected XSS in ICDSoft Reseller Store plugin for WordPress. Affected: ICDSoft Reseller Store

CVE-2024-54319 WordPress Kundgenerator plugin <= 1.0.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kundgenerator Kundgenerator kundgenerator allows Reflected XSS.This issue affects Kundgenerator: from n/a through = 1.0.6...

CVE-2024-54319

CVE-2024-54319 is a reflected XSS vulnerability in Kundgenerator (MultiNet Interactive AB) that affects Kundgenerator versions from n/a up to and including 1.0.6. The connected Red Hat/Wordfence entries indicate this issue is publicly cataloged and has a patch available, with CVSS 3.1 base score ...

CVE-2024-54305 WordPress J&T Express Malaysia plugin <= 2.0.13 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jtexpress J&T Express Malaysia jt-express allows Reflected XSS.This issue affects J&T Express Malaysia: from n/a through = 2.0.13...

CVE-2024-54305

CVE-2024-54305 concerns the J&T Express Malaysia WordPress plugin (jt-express) and is tied to the J&T Express Malaysia plugin for WordPress (woocs J&T Express Malaysia) with vulnerable versions from n/a up to 2.0.13. The connected Red Hat and Wordfence entries confirm a Cross-Site Scripting (XSS)...

CVE-2024-54303

CVE-2024-54303 is a reflected XSS in the Simple Payment WordPress plugin (versions &lt;= 2.3.7) where improper neutralization of input during Web Page Generation allows injection of script output. The CVSS 3.1 base score is 7.1 (HIGH), with attack vector NETWORK, no privileges required, user inte...

CVE-2024-54303 WordPress Simple Payment plugin <= 2.3.7 - Refleceted Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ido Kobelkowsky / yalla ya! Simple Payment allows Reflected XSS.This issue affects Simple Payment: from n/a through 2.3.7...