CVE-2024-51690

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in neelam.samariya Wp Slide Categorywise wp-slide-categorywise allows Reflected XSS.This issue affects Wp Slide Categorywise: from n/a through = 1.1...

CVE-2024-51692

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in askewbrook Bing Search API Integration abbs-bing-search allows Reflected XSS.This issue affects Bing Search API Integration: from n/a through = 0.3.3...

CVE-2024-51676

CVE-2024-51676 is a Cross-Site Scripting (DOM-based XSS) vulnerability in the WordPress plugin Delisho (dr-widgets-blocks). It affects Delisho versions up to and including 1.0.6 and arises from improper input neutralization during web page generation. The issue has a CVSS v3.1 base score of 6.5 (...

CVE-2024-51699 WordPress Buooy Sticky Header plugin <= 0.5.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Buooy Buooy Sticky Header buooy-sticky-header allows Reflected XSS.This issue affects Buooy Sticky Header: from n/a through = 0.5.2...

CVE-2024-51702 WordPress SrcSet Responsive Images for WordPress plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ben.moody SrcSet Responsive Images for WordPress truenorth-srcset allows Reflected XSS.This issue affects SrcSet Responsive Images for WordPress: from n/a through = 1.4...

CVE-2024-10837

CVE-2024-10837 is a Reflected Cross‑Site Scripting vulnerability in the SysBasics Customize My Account for WooCommerce plugin for WordPress. It affects all versions up to 2.7.29 and is exploitable by unauthenticated attackers who lure a user into clicking a crafted link containing the vulnerable ...

CVE-2024-51719

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Roman Peterhans Simplistic SEO simplistic-seo allows Reflected XSS.This issue affects Simplistic SEO: from n/a through = 2.3.0...

CVE-2024-51761

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zackgilbert WPHelpful wphelpful allows Stored XSS.This issue affects WPHelpful: from n/a through = 1.2.4...

CVE-2024-51714

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in techdabang User Password Reset user-password-reset allows Reflected XSS.This issue affects User Password Reset: from n/a through = 1.0...

CVE-2024-51718

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arsdehnel Simple Modal simplemodal allows Cross-Site Scripting XSS.This issue affects Simple Modal: from n/a through = 0.3.3...

CVE-2024-51709

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mariandz TeleAdmin teleadmin allows Reflected XSS.This issue affects TeleAdmin: from n/a through = 1.0.0...

CVE-2024-51707

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebCodin WP Visual Adverts wp-visual-adverts allows Reflected XSS.This issue affects WP Visual Adverts: from n/a through = 2.3.0...

CVE-2024-51704

CVE-2024-51704 affects the WordPress plugin imPress (versions up to 0.1.4). The connected Wordfence data identifies the issue as “Reflected Cross-Site Scripting” (XSS) caused by improper input neutralization during web page generation. The CVE entry is supported by the Wordfence listing which exp...

CVE-2024-51705

CVE-2024-51705 affects WP MMenu Lite (versions: n/a to 1.0.0). It is a reflected Cross‑Site Scripting vulnerability described as Improper Neutralization of Input During Web Page Generation, i.e., input reflected in the generated page. Connected sources (including RH and ENISA records) corroborate...

CVE-2024-51706

CVE-2024-51706 is a reflected cross-site scripting (XSS) vulnerability in the UW Freelancer WordPress plugin. The initial description notes Reflected XSS affecting UW Freelancer: from n/a through 0.1. Connected Red Hat/ENISA entries reiterate the same CVE and description. The CVSS 3.1 base score ...

CVE-2024-51709

CVE-2024-51709 is a Reflected XSS in TeleAdmin (Improper Neutralization of Input During Web Page Generation) affecting TeleAdmin versions 1.0.0 and earlier (n/a through 1.0.0). Connected records corroborate the vulnerability detail and note TeleAdmin is the affected product; CVSS v3.1 vector show...

CVE-2024-51714

CVE-2024-51714 describes a reflected Cross-Site Scripting vulnerability in the WordPress plugin/theme component “User Password Reset.” The issue arises from improper neutralization of user-supplied input during web page generation, allowing an attacker to craft a URL that, when visited by a victi...

CVE-2024-51716

CVE-2024-51716 : Reflected Cross-Site Scripting in Twitter real time search scrolling plugin. Affected: Twitter real time search scrolling (from n/a to 7.0). Root cause per description: improper neutralization of input during web page generation leading to XSS. CVSS v3.1 base score 7.1 (HIGH); At...

CVE-2024-51719

CVE-2024-51719 is a Reflected Cross-Site Scripting vulnerability affecting the WordPress plugin Simplistic SEO . The description notes improper input neutralization during web page generation, enabling Reflected XSS for versions from 0 through 2.3.0 (i.e., affected range up to 2.3.0). The attache...

CVE-2024-51761

CVE-2024-51761 describes a Reflected XSS in the WordPress plugin WPHelpful (WPHelpful: from n/a through 1.2.4). The issue stems from improper neutralization of input during web page generation, enabling reflected cross-site scripting. The CVSS/metrics in the document show a Base Score of 7.1 (HIG...