CVE-2024-51190

TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting XSS vulnerability via the ptRuleApplicationName1.1.6.0.0 parameter on the /specialap.htm page...

CVE-2024-51213

Cross Site Scripting vulnerability in Online Shop Store v.1.0 allows a remote attacker to execute arbitrary code via the login.php component...

CVE-2024-51213

A Cross-Site Scripting (XSS) vulnerability exists in Online Shop Store v.1.0 , specifically within the login.php component. This flaw allows a remote attacker to achieve arbitrary code execution . To mitigate this risk, users are recommended to update to a version of the software that addresses t...

CVE-2024-51213

Cross Site Scripting vulnerability in Online Shop Store v.1.0 allows a remote attacker to execute arbitrary code via the login.php component...

CVE-2024-51213: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Online Shop Store v.1.0 allows a remote attacker to execute arbitrary code via the login.php component...

CVE-2024-51788: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in Joshua Wolfe The Novel Design Store Directory noveldesign-store-directory allows Upload a Web Shell to a Web Server.This issue affects The Novel Design Store Directory: from n/a through = 4.3.0...

Online Shop Store security vulnerabilities

Online Shop Store is an online store system from Online Shop Store, Inc. A security vulnerability exists in Online Shop Store v1.0, which stems from a cross-site scripting vulnerability that allows remote attackers to execute arbitrary code via the login.php component...

PT-2024-34555 · Trendnet · Trendnet Tew-652Brp +1

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-651BR version 2.04B1 TRENDnet TEW-652BRP version 3.04b01 TRENDnet TEW-652BRU version 1.00b12 Description: The issue concerns a Store Cross-site scripting XSS vulnerability. This vulnerability can be exploited via the vsRule...

PT-2024-34565 · Unknown · Online Shop Store

Name of the Vulnerable Software and Affected Versions: Online Shop Store version 1.0 Description: The issue allows a remote attacker to execute arbitrary code. This is achieved via the "login.php" component. Recommendations: For version 1.0, update to a version that fixes this issue, as the curre...

PT-2024-34558 · Trendnet · Trendnet Tew-652Brp +1

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-651BR version 2.04B1 TRENDnet TEW-652BRP version 3.04b01 TRENDnet TEW-652BRU version 1.00b12 Description: The issue is related to a Store Cross-site scripting XSS vulnerability. This vulnerability can be exploited via the ptRule...

WordPress plugin The Novel Design Store Directory code issue vulnerability

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerabilit...

CVE-2024-51188

TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting XSS vulnerability via the vsRuleVirtualServerName1.1.10.0.0 parameter on the /virtualserver.htm page...

PT-2024-34914

Name of the Vulnerable Software and Affected Versions The Novel Design Store Directory versions n/a through 4.3.0 Description The issue allows for the unrestricted upload of files with dangerous types, enabling the upload of a web shell to a web server. This can lead to malicious activities on th...

CVE-2024-51592

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in bnayawpguy Meta Store Elements allows DOM-Based XSS.This issue affects Meta Store Elements: from n/a through 1.0.9...

CVE-2024-51592

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mystical Themes Meta Store Elements meta-store-elements allows DOM-Based XSS.This issue affects Meta Store Elements: from n/a through = 1.0.9...

CVE-2024-51592

CVE-2024-51592 concerns the WordPress plugin Meta Store Elements (versions

CVE-2024-51592 WordPress Meta Store Elements plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mystical Themes Meta Store Elements meta-store-elements allows DOM-Based XSS.This issue affects Meta Store Elements: from n/a through = 1.0.9...

CVE-2024-51592 WordPress Meta Store Elements plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mystical Themes Meta Store Elements meta-store-elements allows DOM-Based XSS.This issue affects Meta Store Elements: from n/a through = 1.0.9...

CVE-2024-51712

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michael Visser Jigoshop – Store Toolkit jigoshop-store-toolkit allows Reflected XSS.This issue affects Jigoshop – Store Toolkit: from n/a through = 1.4.0...

CVE-2024-51712

CVE-2024-51712 : Reflected Cross-Site Scripting vulnerability in Jigoshop – Store Toolkit for WordPress, up to version 1.4.0. Connected documents confirm affected product and root cause (improper neutralization of input during web page generation). Exploitation details, affected versions beyond 1...