CVE-2024-54209

CVE-2024-54209 (WordPress Awesome Shortcodes) is a Reflected Cross-Site Scripting (XSS) vulnerability in WPFactory Awesome Shortcodes versions up to 1.7.2. The issue arises from improper neutralization of input during web page generation, enabling reflected XSS. Public records constrain the impac...

PT-2024-16578 · WordPress · Flixita

Name of the Vulnerable Software and Affected Versions: Flixita theme for WordPress versions up to, and including, 1.0.82 Description: The issue is related to Reflected Cross-Site Scripting via the id parameter due to insufficient input sanitization and output escaping. This allows unauthenticated...

PT-2024-16940 · WordPress · Splash Sync

Name of the Vulnerable Software and Affected Versions: Splash Sync plugin for WordPress versions up to, and including, 2.0.6 Description: The issue arises from the use of add query arg without proper escaping on the URL, allowing unauthenticated attackers to inject arbitrary web scripts into page...

WordPress plugin Broadcast 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2023-6978

The WP Job Manager – Company Profiles plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'company' parameter in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

CVE-2024-53740

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPSwings WooCommerce Ultimate Gift Card woocommerce-ultimate-gift-card allows Reflected XSS.This issue affects WooCommerce Ultimate Gift Card: from n/a through 2.9.1...

CVE-2024-53725

Cross-Site Request Forgery CSRF vulnerability in aMiT Post Hits Counter hits-counter allows Reflected XSS.This issue affects Post Hits Counter: from n/a through = 2.8.23...

CVE-2024-52482

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rafalautopilot Ortto autopilot allows Reflected XSS.This issue affects Ortto: from n/a through = 1.0.19...

CVE-2024-52464

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in anmari amr shortcodes amr-shortcodes allows Reflected XSS.This issue affects amr shortcodes: from n/a through = 1.7...

CVE-2024-52467

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in August Infotech AI Responsive Gallery Album ai-responsive-gallery-album allows Reflected XSS.This issue affects AI Responsive Gallery Album: from n/a through = 1.4...

CVE-2024-52466

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Explara Explara Events explara-events allows Reflected XSS.This issue affects Explara Events: from n/a through = 0.1.3...

CVE-2024-52468

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LeadBoxer LeadBoxer leadboxer allows Reflected XSS.This issue affects LeadBoxer: from n/a through = 1.3...

CVE-2024-52458

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zaymund TM Islamic Helper tm-islamic-helper allows Reflected XSS.This issue affects TM Islamic Helper: from n/a through = 1.0.1...

CVE-2024-52460

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in atarapay AtaraPay WooCommerce Payment Gateway atarapay-woocommerce allows Reflected XSS.This issue affects AtaraPay WooCommerce Payment Gateway: from n/a through = 2.0.13...

CVE-2024-52454

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in goqsystem GoQMieruca goqmieruca allows Reflected XSS.This issue affects GoQMieruca: from n/a through = 1.0.3...

CVE-2024-52453

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in photonicgnostic Library Bookshelves library-bookshelves allows Reflected XSS.This issue affects Library Bookshelves: from n/a through = 5.8...

CVE-2024-52452

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eduNEXT Open edX LMS allows Reflected XSS.This issue affects Open edX LMS: from n/a through 2.6.1...

CVE-2024-52453

CVE-2024-52453 affects WordPress plugin Library Bookshelves (versions n/a through 5.8). The issue is a Reflected XSS due to improper input neutralization during web page generation. Impact per sources: potential for script execution in the context of the user. Remediation: upgrade to a version la...

CVE-2024-52459

CVE-2024-52459 is a Reflected Cross-Site Scripting (XSS) in WordPress plugin Chameleoni Jobs (versions up to 2.5.4). The issue arises from improper input neutralization during web page generation, enabling potential script execution in victims’ browsers if an attacker can induce the vulnerable pl...

CVE-2024-52459 WordPress Chameleoni Jobs plugin <= 2.5.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Chameleoni Chameleoni Jobs chameleon-jobs allows Reflected XSS.This issue affects Chameleoni Jobs: from n/a through = 2.5.4...