16474 matches found
PT-2024-8620 · Moodle +2 · Moodle +2
Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: A flaw was found in Moodle due to inadequate protection of the web page structure, allowing a remote attacker to perform cross-site scripting XSS attacks. The issue arises from H5P error...
CVE-2024-43241
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through = 12.7...
CVE-2024-43244
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in favethemes Houzez allows Reflected XSS.This issue affects Houzez: from n/a through 3.2.4...
CVE-2024-43246
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in creativeon WHMpress allows Reflected XSS.This issue affects WHMpress: from n/a through 6.2-revision-5...
CVE-2024-43244 WordPress houzez Theme By FaveThemes <= 3.2.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in favethemes Houzez allows Reflected XSS.This issue affects Houzez: from n/a through 3.2.4...
CVE-2024-43244
CVE-2024-43244 is a Reflected XSS in the Houzez WordPress theme by Favethemes, affecting Houzez versions from 0 through 3.2.4. The vulnerability arises from improper neutralization of input during web page generation. Red Hat and Wordfence entries corroborate the same description and classify it ...
CVE-2024-43246
CVE-2024-43246 refers to a reflected XSS in WHMpress (WHMCS WordPress integration plugin). Public sources in connected documents confirm this vulnerability affects WHMpress versions up to 6.2-revision-5 and describe it as an input-neutralization issue during web page generation. Red Hat and Wordf...
CVE-2024-43279 WordPress Newsletters plugin <= 4.9.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tribulant Newsletters allows Reflected XSS.This issue affects Newsletters: from n/a through 4.9.8...
CVE-2024-43279 WordPress Newsletters plugin <= 4.9.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tribulant Newsletters allows Reflected XSS.This issue affects Newsletters: from n/a through 4.9.8...
CVE-2024-43306
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Lab WP-Lister Lite for eBay wp-lister-for-ebay.This issue affects WP-Lister Lite for eBay: from n/a through = 3.6.0...
CVE-2024-43348
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Iznyn Purity Of Soul allows Reflected XSS.This issue affects Purity Of Soul: from n/a through 1.9...
CVE-2024-43327
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Boone Gorges Invite Anyone allows Reflected XSS.This issue affects Invite Anyone: from n/a through 1.4.7...
CVE-2024-43330
CVE-2024-43330 concerns PowerPack for Beaver Builder. It is a Reflected Cross-Site Scripting vulnerability in PowerPack for Beaver Builder (IdeaBox Creations) that affects versions up to 2.37.3 (and before 2.37.4). The root cause is improper input neutralization during web page generation, enabli...
CVE-2024-43238
CVE-2024-43238: WeMail for WordPress has a Reflected XSS in web page generation. Affected: the weMail plugin up to version 1.14.5 (from n/a through 1.14.5). According to the connected docs, the issue is publicly associated with this CVE and has a patch status indicating it was addressed (patched)...
CVE-2024-43348
CVE-2024-43348 is a reflected XSS vulnerability in the Purity Of Soul WordPress theme. The issue is described as an improper neutralization of input during web page generation, affecting Purity Of Soul versions from n/a up to 1.9. Connected records corroborate the vulnerability title and scope bu...
PT-2024-30440 · Unknown · Child Theme Creator
Name of the Vulnerable Software and Affected Versions: Child Theme Creator versions 1.5.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows Reflected XSS. The estimated number of...
CVE-2024-43809
In JetBrains TeamCity before 2024.07.1 reflected XSS was possible on the agentPushPreset page...
CVE-2024-43810
In JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core plugin...
