16445 matches found
CVE-2024-10577
CVE-2024-10577 concerns the Fat Rat Collect WordPress plugin. The vulnerability is a Reflected Cross-Site Scripting (XSS) due to missing URL escaping, affecting all versions up to and including 2.7.3. Unauthenticated attackers could inject arbitrary scripts in pages executed when a user performs ...
CVE-2024-11004
Reflected XSS in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote unauthenticated attacker to obtain admin privileges. User interaction is required...
WordPress Constant Contact Forms by MailMunch plugin <= 2.1.2 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Constant Contact Forms by MailMunch versions = 2.1.2...
CVE-2024-11004
Reflected XSS in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote unauthenticated attacker to obtain admin privileges. User interaction is required...
CVE-2024-11004
Ivanti CVE-2024-11004 is a reflected XSS in Ivanti Connect Secure (before 22.7R2.1) and Ivanti Policy Secure (before 22.7R1.1) that could allow a remote unauthenticated attacker to obtain admin privileges with user interaction. Impact is MEDIUM (CVSS v3.1 base 6.1). Affected products/functions: C...
CVE-2024-9835 RSS Feed Widget < 3.0.1 - Reflected XSS
The RSS Feed Widget WordPress plugin before 3.0.1 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...
CVE-2024-10685
The Contact Form 7 Redirect & Thank You Page plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
WordPress plugin Contact Form 7 Redirect & Thank You Page 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...
Moodle reflected XSS via H5P error message
A flaw was found in moodle. H5P error messages require additional sanitizing to prevent a reflected cross-site scripting XSS risk...
CVE-2024-43439 Moodle: reflected xss via h5p error message
A flaw was found in moodle. H5P error messages require additional sanitizing to prevent a reflected cross-site scripting XSS risk...
CVE-2024-11019 Grand Vice info Webopac7 - Reflected XSS
Webopac from Grand Vice info has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript code in the user's browser through phishing techniques...
CVE-2024-50990
CVE-2024-50990 affects PHPGurukul Online Marriage Registration System v1.0, in the file /omrs/user/search.php. A reflected Cross Site Scripting (XSS) flaw is exploitable by remote attackers who send a crafted POST parameter, "searchdata", enabling execution of arbitrary code in the context of the...
PT-2024-16695
Name of the Vulnerable Software and Affected Versions Ivanti Connect Secure versions prior to 22.7R2.1 Ivanti Policy Secure versions prior to 22.7R1.1 Description The issue is related to a Reflected XSS that allows a remote unauthenticated attacker to obtain admin privileges, with user interactio...
CVE-2024-51706
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Upeksha Wisidagama UW Freelancer uw-freelancer allows Reflected XSS.This issue affects UW Freelancer: from n/a through = 0.1...
CVE-2024-51697
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Doofinder Doofinder doofinder allows Reflected XSS.This issue affects Doofinder: from n/a through = 0.5.4...
CVE-2024-51701
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mahesh Waghmare MG Post Contributors mg-post-contributors allows Reflected XSS.This issue affects MG Post Contributors: from n/a through = 1.3...
CVE-2024-51702
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ben.moody SrcSet Responsive Images for WordPress truenorth-srcset allows Reflected XSS.This issue affects SrcSet Responsive Images for WordPress: from n/a through = 1.4...
CVE-2024-51693
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in labdav Search order by product SKU for WooCommerce search-order-by-product-sku-for-woocommerce allows Reflected XSS.This issue affects Search order by product SKU for WooCommerce: from n/a through ...
CVE-2024-51694
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in digitalfisherman Geotagged Media geotagged-media allows Reflected XSS.This issue affects Geotagged Media: from n/a through = 0.3.0...