Lucene search
+L

8179 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/06 12:00 a.m.•8 views

CVE-2024-47329: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in quomodosoft ElementsReady Addons for Elementor element-ready-lite allows Cross-Site Scripting XSS.This issue affects ElementsReady Addons for Elementor: from n/a through = 6.4.0...

6.5CVSS5.8AI score0.00277EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/06 12:00 a.m.•24 views

PT-2024-31503 · Diebold Nixdorf · Diebold Nixdorf

Name of the Vulnerable Software and Affected Versions: Diebold Nixdorf affected versions not specified Description: The issue concerns an Uncontrolled Search Path Element, which is a type of security weakness. This weakness can potentially be exploited to execute malicious code or escalate...

7.3CVSS7.7AI score0.00169EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2024/10/05 3:15 p.m.•24 views

CVE-2024-47392

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BdThemes Element Pack Elementor Addons allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 5.7.5...

5.4CVSS5.8AI score0.00261EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/05 3:15 p.m.•25 views

CVE-2024-47392

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bdthemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through = 5.7.5...

6.5CVSS0.00261EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/05 2:42 p.m.•71 views

CVE-2024-47392

The CVE-2024-47392 entry documents a Stored Cross-Site Scripting vulnerability in BdThemes Element Pack Elementor Addons (up to version 5.7.5). The root cause is improper neutralization of input during web page generation, enabling XSS via the affected addon. The issue affects Elementor Addons in...

6.5CVSS5.9AI score0.00261EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/10/05 2:42 p.m.•18 views

CVE-2024-47392 WordPress Element Pack Elementor Addons plugin <= 5.7.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BdThemes Element Pack Elementor Addons allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 5.7.5...

6.5CVSS6.8AI score0.00261EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/05 2:42 p.m.•44 views

CVE-2024-47392 WordPress Element Pack Elementor Addons plugin <= 5.7.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bdthemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through = 5.7.5...

6.5CVSS0.00261EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/05 2:15 p.m.•24 views

CVE-2024-47628

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through = 1.3.9.3...

6.5CVSS0.0026EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/05 1:23 p.m.•42 views

CVE-2024-47628 WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.9.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through = 1.3.9.3...

6.5CVSS0.0026EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/05 1:23 p.m.•16 views

CVE-2024-47628 WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.9.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through = 1.3.9.3...

6.5CVSS5.9AI score0.0026EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/05 12:00 a.m.•5 views

CVE-2024-47628: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through = 1.3.9.3...

6.5CVSS5.8AI score0.0026EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/05 12:00 a.m.•6 views

PT-2024-32685

Name of the Vulnerable Software and Affected Versions LA-Studio Element Kit for Elementor versions 1.3.9.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS. This means that ...

6.5CVSS5.8AI score0.0026EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/05 12:00 a.m.•7 views

CVE-2024-47392: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bdthemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through = 5.7.5...

6.5CVSS5.8AI score0.00261EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/05 12:00 a.m.•24 views

PT-2024-32611 · Bdthemes · Element Pack Elementor Addons

Name of the Vulnerable Software and Affected Versions: BdThemes Element Pack Elementor Addons versions through 5.7.5 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS in the Eleme...

6.5CVSS5.8AI score0.00261EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/10/05 12:00 a.m.•21 views

WordPress plugin Element Pack Elementor Addons 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

6.5CVSS6.2AI score0.00261EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/10/03 12:00 a.m.•16 views

PT-2024-10113 · Zabbix +4 · Zabbix +4

Name of the Vulnerable Software and Affected Versions: Zabbix versions prior to 7.0.3 Description: The issue is related to insufficient input validation in the Zabbix universal monitoring system. This can allow a remote attacker to elevate their privileges. When a URL is added to the map element,...

9.9CVSS6.6AI score0.79105EPSS
SaveExploits15References120
BDU FSTEC
BDU FSTEC
•added 2024/10/03 12:00 a.m.•19 views

Grafana Alloy Privilege Escalation

The vulnerability of the Grafana Alloy data visualization system is related to the absence of quotation marks in the wording of elements or search paths. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.3CVSS7.2AI score0.003EPSS
SaveExploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/10/03 12:00 a.m.•21 views

Ivanti Workspace Control Code Execution

The vulnerability of the software for controlling user access to applications and data in Ivanti Workspace Control is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a perpetrator to enhance their privileges and execute arbitrary code...

8.8CVSS5.8AI score0.00266EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2024/10/01 3:26 p.m.•9 views

CVE-2024-47604

NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability in its handling of HTML element attributes, which allows an attacker to execute arbitrary HTML or Javascript code in a victim's browser...

8.4CVSS0.00758EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2024/10/01 3:26 p.m.•24 views

CVE-2024-47604 XSS vulnerability in NuGetGallery HTML attributes handling

NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability in its handling of HTML element attributes, which allows an attacker to execute arbitrary HTML or Javascript code in a victim's browser...

8.2CVSS7.4AI score0.00758EPSS
SaveExploits0References5
Rows per page
Query Builder