CVE-2024-5849

An unauthenticated remote attacker may use a reflected XSS vulnerability to obtain information from a user or reboot the affected device once...

CVE-2024-5849

CVE-2024-5849 is tied to Pepperl+Fuchs Device Master ICDM-RX gateways and describes an unauthenticated reflected XSS vulnerability in the device web interface. The issue allows a remote attacker to obtain information from a user or reboot the affected device once, with CVSS indicating NETWORK acc...

SUSE SLED15: python311-Twisted / python311-Twisted-all_non_platform / etc (SUSE-SU-2024:2880-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2880-1 advisory. - CVE-2024-41671: Fixed an information disclosure due to HTTP requests processed out-of-order...

PT-2024-37190 · Pepperl+Fuchs · Icdm-Rx/En-2Db9/Rj45-Din +51

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An unauthenticated remote attacker may use a reflected XSS vulnerability to obtain information from a user or reboot the affected device once. This issu...

CVE-2024-43126 WordPress Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce plugin <= 2.6.14 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Sender Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce allows Reflected XSS.This issue affects Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce...

CVE-2024-43220

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in 10Web Form Builder Team Form Maker by 10Web allows Reflected XSS.This issue affects Form Maker by 10Web: from n/a through 1.15.26...

CVE-2024-43220

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in 10Web Form Builder Team Form Maker by 10Web allows Reflected XSS.This issue affects Form Maker by 10Web: from n/a through 1.15.26...

CVE-2024-43217

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Pierre Lebedel Kodex Posts likes allows Reflected XSS.This issue affects Kodex Posts likes: from n/a through 2.5.0...

CVE-2024-43213

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MultiVendorX WC Marketplace allows Reflected XSS.This issue affects WC Marketplace: from n/a through 4.1.17...

CVE-2024-43156

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AddonMaster Post Grid Master allows Reflected XSS.This issue affects Post Grid Master: from n/a through 3.4.10...

CVE-2024-43156

CVE-2024-43156 is a reflected XSS in Post Grid Master (AddonMaster Post Grid Master). The vulnerability arises from improper neutralization of input during web page generation and affects Post Grid Master versions from n/a up to 3.4.10. The CVE entry is marked as patched; remediation is to upgrad...

CVE-2024-43163

CVE-2024-43163 affects ParcelPanel (WordPress plugin) with a Reflected XSS vulnerability due to improper input neutralization during web page generation. Affected versions are ParcelPanel from n/a up to and including 4.3.2. Public metrics indicate a CVSS v3.1 base score of 7.1 (HIGH) with network...

CVE-2024-43217

CVE-2024-43217 is a reflected XSS vulnerability in the Kodex Posts likes WordPress plugin. The issue arises from improper neutralization of user-controlled input during web page generation, allowing an attacker to inject and execute script in a victim user’s browser. Affected: Kodex Posts likes v...

SUSE-SU-2024:2880-1 Security update for python-Twisted

This update for python-Twisted fixes the following issues: - CVE-2024-41671: Fixed an information disclosure due to HTTP requests processed out-of-order bsc1228549 - CVE-2024-41810: Fixed reflected XSS via HTML injection in redirect response bsc1228552...

CVE-2024-40484

A Reflected Cross Site Scripting XSS vulnerability was found in "/oahms/search.php" in PHPGurukul Old Age Home Management System v1.0, which allows remote attackers to execute arbitrary code via the "searchdata" parameter...

PT-2024-30355 · Unknown · Parcelpanel

Name of the Vulnerable Software and Affected Versions: ParcelPanel versions n/a through 4.3.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS in ParcelPanel. Recommendations: Fo...

PT-2024-30380 · Unknown · Kodex Posts Likes

Name of the Vulnerable Software and Affected Versions: Kodex Posts likes versions through 2.5.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows Reflected XSS. Recommendations: For versions throug...

SUSE: Security Advisory (SUSE-SU-2024:2860-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-33533

An issue was discovered in Zimbra Collaboration ZCS 9.0 and 10.0, issue 1 of 2. A reflected cross-site scripting XSS vulnerability has been identified in the Zimbra webmail admin interface. This vulnerability occurs due to inadequate input validation of the packages parameter, allowing an...

PT-2024-30384 · 10Web · Form Maker

Name of the Vulnerable Software and Affected Versions: Form Maker by 10Web versions 1.15.26 and earlier Description: This issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. It allows Reflected XSS, which can be exploited by...