CVE-2024-51709

CVE-2024-51709 is a Reflected XSS in TeleAdmin (Improper Neutralization of Input During Web Page Generation) affecting TeleAdmin versions 1.0.0 and earlier (n/a through 1.0.0). Connected records corroborate the vulnerability detail and note TeleAdmin is the affected product; CVSS v3.1 vector show...

CVE-2024-51714

CVE-2024-51714 describes a reflected Cross-Site Scripting vulnerability in the WordPress plugin/theme component “User Password Reset.” The issue arises from improper neutralization of user-supplied input during web page generation, allowing an attacker to craft a URL that, when visited by a victi...

CVE-2024-51716

CVE-2024-51716 : Reflected Cross-Site Scripting in Twitter real time search scrolling plugin. Affected: Twitter real time search scrolling (from n/a to 7.0). Root cause per description: improper neutralization of input during web page generation leading to XSS. CVSS v3.1 base score 7.1 (HIGH); At...

CVE-2024-51719

CVE-2024-51719 is a Reflected Cross-Site Scripting vulnerability affecting the WordPress plugin Simplistic SEO . The description notes improper input neutralization during web page generation, enabling Reflected XSS for versions from 0 through 2.3.0 (i.e., affected range up to 2.3.0). The attache...

CVE-2024-51761

CVE-2024-51761 describes a Reflected XSS in the WordPress plugin WPHelpful (WPHelpful: from n/a through 1.2.4). The issue stems from improper neutralization of input during web page generation, enabling reflected cross-site scripting. The CVSS/metrics in the document show a Base Score of 7.1 (HIG...

CVE-2024-51779

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jason Coleman Don't Break The Code dont-break-the-code allows Reflected XSS.This issue affects Don't Break The Code: from n/a through = .3.1...

CVE-2024-51780

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eewee eewee admin custom eewee-admincustom allows Reflected XSS.This issue affects eewee admin custom: from n/a through = 1.8.2.4...

CVE-2024-51778

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tevya Satisfaction Reports from Help Scout happiness-reports-for-help-scout allows Reflected XSS.This issue affects Satisfaction Reports from Help Scout: from n/a through = 2.0.3...

CVE-2024-51776

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sam Hotchkiss Daily Image daily-image allows Reflected XSS.This issue affects Daily Image: from n/a through = 1.0...

CVE-2024-51763

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in biplob018 Team Showcase and Slider – Team Members Builder team-showcase-ultimate allows Reflected XSS.This issue affects Team Showcase and Slider – Team Members Builder: from n/a through = 1.3...

CVE-2024-51762

CVE-2024-51762 is a Reflected XSS in PropertyShift (Nightshift Creative) WordPress plugin, affected versions are up to 1.0.0. The vulnerability is triggered by input that is not properly neutralized during web page generation, enabling Reflected XSS. Base metrics show a high severity (CVSS 3.1: 7...

CVE-2024-51763

CVE-2024-51763 — Reflected XSS in WordPress plugin “Team Showcase and Slider – Team Members Builder.” Exploitation arises from improper input neutralization during web page generation, enabling reflected cross-site scripting. Affected software: Team Showcase and Slider – Team Members Builder, ver...

CVE-2024-10676

CVE-2024-10676 describes a Reflected XSS in the WordPress plugin Conversion Helper (Wojciech Borowicz). The vulnerability arises from improper input neutralization during web page generation, allowing attacker-supplied input to be reflected in the page. Affected software: Conversion Helper, versi...

CVE-2024-51776

CVE-2024-51776 is a Reflected XSS in the Daily Image WordPress plugin. The issue stems from improper input neutralization during web page generation, affecting Daily Image versions from n/a through 1.0. The connected Red Hat advisory confirms the vulnerability context but does not provide remedia...

CVE-2024-51780

CVE-2024-51780 : Reflected XSS in eewee admin custom WordPress plugin. Affected: eewee admin custom from n/a through 1.8.2.4. Root cause: improper neutralization during web page generation. CVSS v3.1 base score 7.1 (HIGH); impact: confidentiality, integrity, and availability (LOW) per provided me...

CVE-2024-10683 Contact Form 7 - PayPal & Stripe Add-on <= 2.3.1 - Reflected Cross-Site Scripting

The Contact Form 7 – PayPal & Stripe Add-on plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 2.3.1. This makes it possible for unauthenticated attackers...

PT-2024-34853 · Unknown · Uw Freelancer

Name of the Vulnerable Software and Affected Versions: UW Freelancer versions through 0.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For versions through...

PT-2024-34862 · Unknown · Gopi.R Twitter Plugin

Name of the Vulnerable Software and Affected Versions: Gopi.R Twitter Plugin versions prior to 7.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS in the Twitter real-time searc...

PT-2024-34863 · Perception System · Perception System Ajax Content Filter

Name of the Vulnerable Software and Affected Versions: Perception System Ajax Content Filter versions 1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks...

PT-2024-34907 · Unknown · Firework Shoppable Live Video

Name of the Vulnerable Software and Affected Versions: Firework Shoppable Live Video versions n/a through 6.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks...