16839 matches found
CVE-2024-41658 GHSL-2024-036: Reflected XSS in QrCodePage.js
Casdoor is a UI-first Identity and Access Management IAM / Single-Sign-On SSO platform. In Casdoor 1.577.0 and earlier, he purchase URL that is created to generate a WechatPay QR code is vulnerable to reflected XSS. When purchasing an item through casdoor, the product page allows you to pay via...
PT-2024-37580 · 3Dswymer +1 · 3Dswymer +1
Name of the Vulnerable Software and Affected Versions: 3DPassport in 3DSwymer versions Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x Description: The issue allows an attacker to redirect users to an arbitrary website via a crafted URL, which is an open redirect vulnerability...
PT-2024-8620 · Moodle +2 · Moodle +2
Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: A flaw was found in Moodle due to inadequate protection of the web page structure, allowing a remote attacker to perform cross-site scripting XSS attacks. The issue arises from H5P error...
CVE-2024-43241
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through = 12.7...
CVE-2024-43244
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in favethemes Houzez allows Reflected XSS.This issue affects Houzez: from n/a through 3.2.4...
CVE-2024-43246
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in creativeon WHMpress allows Reflected XSS.This issue affects WHMpress: from n/a through 6.2-revision-5...
CVE-2024-43244 WordPress houzez Theme By FaveThemes <= 3.2.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in favethemes Houzez allows Reflected XSS.This issue affects Houzez: from n/a through 3.2.4...
CVE-2024-43244
CVE-2024-43244 is a Reflected XSS in the Houzez WordPress theme by Favethemes, affecting Houzez versions from 0 through 3.2.4. The vulnerability arises from improper neutralization of input during web page generation. Red Hat and Wordfence entries corroborate the same description and classify it ...
CVE-2024-43246
The creativeon WHMpress WordPress plugin is vulnerable to Reflected Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This issue affects versions up to and including 6.2-revision-5 . An attacker could potentially leverage this vulnerability to execute ...
CVE-2024-43279 WordPress Newsletters plugin <= 4.9.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tribulant Newsletters allows Reflected XSS.This issue affects Newsletters: from n/a through 4.9.8...
CVE-2024-43279 WordPress Newsletters plugin <= 4.9.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tribulant Newsletters allows Reflected XSS.This issue affects Newsletters: from n/a through 4.9.8...
CVE-2024-43306
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Lab WP-Lister Lite for eBay wp-lister-for-ebay.This issue affects WP-Lister Lite for eBay: from n/a through = 3.6.0...
CVE-2024-43348
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Iznyn Purity Of Soul allows Reflected XSS.This issue affects Purity Of Soul: from n/a through 1.9...
CVE-2024-43327
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Boone Gorges Invite Anyone allows Reflected XSS.This issue affects Invite Anyone: from n/a through 1.4.7...
CVE-2024-43330
CVE-2024-43330 concerns PowerPack for Beaver Builder. It is a Reflected Cross-Site Scripting vulnerability in PowerPack for Beaver Builder (IdeaBox Creations) that affects versions up to 2.37.3 (and before 2.37.4). The root cause is improper input neutralization during web page generation, enabli...
CVE-2024-43238
CVE-2024-43238: WeMail for WordPress has a Reflected XSS in web page generation. Affected: the weMail plugin up to version 1.14.5 (from n/a through 1.14.5). According to the connected docs, the issue is publicly associated with this CVE and has a patch status indicating it was addressed (patched)...
CVE-2024-43348
CVE-2024-43348 is a reflected XSS vulnerability in the Purity Of Soul WordPress theme. The issue is described as an improper neutralization of input during web page generation, affecting Purity Of Soul versions from n/a up to 1.9. Connected records corroborate the vulnerability title and scope bu...
PT-2024-30440 · Unknown · Child Theme Creator
Name of the Vulnerable Software and Affected Versions: Child Theme Creator versions 1.5.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows Reflected XSS. The estimated number of...
