CVE-2024-54327

CVE-2024-54327 is a reflected cross-site scripting vulnerability in the UNIVERSAM product. The issue stems from improper input neutralization during web page generation, enabling an attacker to cause XSS when a user loads a crafted URL. According to the provided CVSS data, the baseline is CVSS v3...

CVE-2024-54325

CVE-2024-54325 is a reflected cross-site scripting vulnerability in CarDealerPress (DealerTrend) that allows an attacker to inject malicious input which is reflected in the web page. The issue is caused by improper neutralization of input during web page generation, enabling likely an XSS payload...

CVE-2024-54324

CVE-2024-54324 – Reflected Cross-Site Scripting in SMSify (Cloud Inn). The vulnerability arises from improper input neutralization during web page generation, enabling attacker-controlled input to be reflected in the page. Affected: SMSify versions up to 6.0.4 (exact product naming in source). CV...

CVE-2024-54320

CVE-2024-54320: Reflected XSS in ICDSoft Reseller Store plugin for WordPress. Affected: ICDSoft Reseller Store

CVE-2024-54319 WordPress Kundgenerator plugin <= 1.0.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kundgenerator Kundgenerator kundgenerator allows Reflected XSS.This issue affects Kundgenerator: from n/a through = 1.0.6...

CVE-2024-54319

CVE-2024-54319 is a reflected XSS vulnerability in Kundgenerator (MultiNet Interactive AB) that affects Kundgenerator versions from n/a up to and including 1.0.6. The connected Red Hat/Wordfence entries indicate this issue is publicly cataloged and has a patch available, with CVSS 3.1 base score ...

CVE-2024-54305 WordPress J&T Express Malaysia plugin <= 2.0.13 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jtexpress J&T Express Malaysia jt-express allows Reflected XSS.This issue affects J&T Express Malaysia: from n/a through = 2.0.13...

CVE-2024-54305

CVE-2024-54305 concerns the J&T Express Malaysia WordPress plugin (jt-express) and is tied to the J&T Express Malaysia plugin for WordPress (woocs J&T Express Malaysia) with vulnerable versions from n/a up to 2.0.13. The connected Red Hat and Wordfence entries confirm a Cross-Site Scripting (XSS)...

CVE-2024-54303

CVE-2024-54303 is a reflected XSS in the Simple Payment WordPress plugin (versions &lt;= 2.3.7) where improper neutralization of input during Web Page Generation allows injection of script output. The CVSS 3.1 base score is 7.1 (HIGH), with attack vector NETWORK, no privileges required, user inte...

CVE-2024-54303 WordPress Simple Payment plugin <= 2.3.7 - Refleceted Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ido Kobelkowsky / yalla ya! Simple Payment allows Reflected XSS.This issue affects Simple Payment: from n/a through 2.3.7...

CVE-2024-54302

CVE-2024-54302 refers to a reflected XSS in VForm (Lifetime free Drag & Drop Contact Form Builder for WordPress). The issue arises from improper neutralization of user-supplied input during web page generation, enabling reflected cross-site scripting when a malicious payload is echoed back in res...

CVE-2024-54301 WordPress FormFacade plugin <= 1.3.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in manidoraisamy FormFacade formfacade allows Reflected XSS.This issue affects FormFacade: from n/a through = 1.3.6...

CVE-2024-54301 WordPress FormFacade plugin <= 1.3.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in manidoraisamy FormFacade formfacade allows Reflected XSS.This issue affects FormFacade: from n/a through = 1.3.6...

CVE-2024-54290 WordPress Role Includer plugin <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Justin Fletcher Role Includer role-includer allows Reflected XSS.This issue affects Role Includer: from n/a through = 1.6...

CVE-2024-54290

The CVE CVE-2024-54290 concerns Justin Fletcher Role Includer with a Reflected XSS due to improper input neutralization during web page generation; affected versions are n/a through 1.6. A PT Security entry confirms the issue and provides mitigation guidance: update to a version that includes a f...

CVE-2024-54288 WordPress LDD Directory Lite plugin <= 3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LDD Web Design LDD Directory Lite ldd-directory-lite allows Reflected XSS.This issue affects LDD Directory Lite: from n/a through = 3.3...

CVE-2024-54288

CVE-2024-54288 affects the WordPress plugin “LDD Directory Lite” up to version 3.3 (names/versions vary in sources). The issue is an Improper Neutralization of Input During Web Page Generation (XSS) leading to a reflected XSS vulnerability. The root cause is insufficient input handling in web pag...

CVE-2024-54275

CVE-2024-54275 refers to an Reflected Cross‑Site Scripting (XSS) vulnerability in the WordPress plugin CSV to HTML . The vulnerability arises from improper neutralization of input during web page generation, allowing reflected XSS. Affected software is the CSV to HTML plugin (version range listed...

CVE-2024-54275 WordPress CSV to html plugin <= 3.08 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wibergsweb CSV to html csv-to-html allows Reflected XSS.This issue affects CSV to html: from n/a through = 3.08...

CVE-2024-54274

CVE-2024-54274 is a Reflected XSS in the WordPress plugin WordPress HelpDesk & Support Ticket System Plugin – Octrace Support. Affected versions are up to 1.2.7; the root cause is Improper Neutralization of Input During Web Page Generation. The Wordfence digest notes Patch Status as Unpatched; no...