PT-2024-27295 · Unitedthemes · Shortcodes

Name of the Vulnerable Software and Affected Versions: Shortcodes by United Themes versions prior to 5.0.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For...

CVE-2024-38703

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Xylus Themes WP Event Aggregator allows Stored XSS.This issue affects WP Event Aggregator: from n/a through 1.7.9...

CVE-2024-38703

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Xylus Themes WP Event Aggregator allows Stored XSS.This issue affects WP Event Aggregator: from n/a through 1.7.9...

CVE-2024-38674

CVE-2024-38674 is a stored XSS in SKT Addons for Elementor (WordPress plugin) that affects SKT Addons for Elementor versions up to 3.0. The vulnerability is caused by improper neutralization of input during web page generation, enabling stored cross-site scripting. Public references in the initia...

CVE-2024-38698

CVE-2024-38698 affects the SKT Skill Bar WordPress plugin (versions

CVE-2024-38703

CVE-2024-38703 affects WordPress WP Event Aggregator (Plugin) versions n/a through 1.7.9. The issue is Stored XSS due to Improper Neutralization of Input During Web Page Generation. Root cause and impact are stated in the connected records; remediation guidance from the sources is to update to a ...

CVE-2024-38703 WordPress WP Event Aggregator plugin <= 1.7.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Xylus Themes WP Event Aggregator allows Stored XSS.This issue affects WP Event Aggregator: from n/a through 1.7.9...

PT-2024-28147

Name of the Vulnerable Software and Affected Versions Xylus Themes WP Event Aggregator versions 1.7.9 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...

The vulnerability of Themes component in Windows operating systems, which allows attackers to carry out spoofing attacks

The vulnerability of Themes Windows themes in Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability allows a remote attacker to carry out spoofing attacks...

Malicious code in cx-web-themes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4311da313c4de72f9e25c5c573ce6a9ebe1bd2cb1c24d5b37af1e4e6d23717ab The OpenSSF Package Analysis project identified 'cx-web-themes' @ 200.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7729 Malicious code in cx-web-themes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4311da313c4de72f9e25c5c573ce6a9ebe1bd2cb1c24d5b37af1e4e6d23717ab The OpenSSF Package Analysis project identified 'cx-web-themes' @ 200.0.1 npm as malicious. It is considered malicious because: - The package...

CVE-2024-38030

Windows Themes Spoofing Vulnerability...

CVE-2024-38030

Windows Themes Spoofing Vulnerability...

CVE-2024-38030

Technical details for CVE-2024-38030 are not publicly disclosed in the provided documents. No affected products, root cause, impact, or fixes are specified. Monitor for updates as more information becomes available.

CVE-2024-38030 Windows Themes Spoofing Vulnerability

...

CVE-2024-38030 Windows Themes Spoofing Vulnerability

...

CVE-2024-37090 SQL Injection vulnerability in multiple StylemixThemes premium themes

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in StylemixThemes Masterstudy Elementor Widgets, StylemixThemes Consulting Elementor Widgets.This issue affects Masterstudy Elementor Widgets: from n/a through 1.2.2; Consulting Elementor Widgets: fro...

Windows Themes Spoofing Vulnerability

...

PT-2024-4855 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows versions 7 through 11 affected versions not specified Description: A spoofing vulnerability exists within the Windows Themes component, potentially allowing attackers to steal NTLM credentials. The vulnerability is related to the...

Microsoft Windows Security Vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from the American company Microsoft Microsoft. A security vulnerability exists in Microsoft Windows Themes. An attacker could exploit this vulnerability to conduct spoofing attacks. The following products and editions a...