CVE-2024-51871

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in luzuk Themes Luzuk Team luzuk-team allows Stored XSS.This issue affects Luzuk Team: from n/a through = 0.1.0...

CVE-2024-51863

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Profit Funnels PF Timer pf-timer allows Stored XSS.This issue affects PF Timer: from n/a through = 1.0.0...

CVE-2024-50543

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mudssar amazing neo icon font for elementor amazing-neo-icon-font-for-elementor allows DOM-Based XSS.This issue affects amazing neo icon font for elementor: from n/a through = 2.0.1...

CVE-2024-50513

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPXPO PostX ultimate-post allows Stored XSS.This issue affects PostX: from n/a through = 4.1.15...

CVE-2024-50513

The CVE-2024-50513 vulnerability affects WordPress PostX plugin (Post Grid Gutenberg Blocks and WordPress Blog Plugin) versions up to and including 4.1.15. The underlying flaw is improper neutralization of input during web page generation, enabling Stored XSS. Impact is described as stored XSS wi...

CVE-2024-50543 WordPress amazing neo icon font for elementor plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mudssar amazing neo icon font for elementor amazing-neo-icon-font-for-elementor allows DOM-Based XSS.This issue affects amazing neo icon font for elementor: from n/a through = 2.0.1...

CVE-2024-50543

CVE-2024-50543 concerns a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin “amazing neo icon font for elementor.” The CVE entry and related sources confirm that the issue is an improper neutralization of input during web page generation, leading to DOM-based XSS in versions up to ...

CVE-2024-51863 WordPress PF Timer plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Profit Funnels PF Timer pf-timer allows Stored XSS.This issue affects PF Timer: from n/a through = 1.0.0...

CVE-2024-51863

CVE-2024-51863 : Stored XSS in WordPress PF Timer plugin (PF Timer,

CVE-2024-51863 WordPress PF Timer plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Team Profit-Funnels PF Timer allows Stored XSS.This issue affects PF Timer: from n/a through 1.0.0...

CVE-2024-51871 WordPress Luzuk Team plugin <= 0.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in luzuk Themes Luzuk Team luzuk-team allows Stored XSS.This issue affects Luzuk Team: from n/a through = 0.1.0...

CVE-2024-51871 WordPress Luzuk Team plugin <= 0.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in luzuk Themes Luzuk Team luzuk-team allows Stored XSS.This issue affects Luzuk Team: from n/a through = 0.1.0...

CVE-2024-51871

CVE-2024-51871 is a Stored XSS in the WordPress plugin Luzuk Team (

CVE-2024-51876

CVE-2024-51876 affects the WordPress plugin wp_automatic_widget (versions up to 1.0.1). The issue is a DOM-based XSS caused by improper input neutralization during web page generation. Public details in connected sources confirm the vulnerability and affected version range. The CVE entry indicate...

CVE-2024-51871: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in luzuk Themes Luzuk Team luzuk-team allows Stored XSS.This issue affects Luzuk Team: from n/a through = 0.1.0...

WordPress plugin Luzuk Team 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...

PT-2024-35001 · Unknown · Luzuk Team

Name of the Vulnerable Software and Affected Versions: Luzuk Team versions 0.1.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into the website,...

CVE-2024-52341

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Offshorent Solutions Pvt Ltd OS Our Team os-our-team allows Stored XSS.This issue affects OS Our Team: from n/a through = 1.7...

CVE-2024-52419

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Clipboard Agency Copy Anything to Clipboard copy-the-code allows Stored XSS.This issue affects Copy Anything to Clipboard: from n/a through = 4.0.3...

WordPress Team Rosters plugin <= 4.8.2 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Team Rosters versions = 4.8.2...