EUVD-2024-46038

Malicious code in bioql PyPI...

CVE-2024-52486

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SolverWp Elementor Portfolio Builder portfolio-builder-elementor allows DOM-Based XSS.This issue affects Elementor Portfolio Builder: from n/a through = 1.0.0...

CVE-2024-52486

CVE-2024-52486 is a DOM-based XSS in the WordPress plugin Elementor Portfolio Builder (SolverWP) affecting versions up to and including 1.0.0, caused by improper input neutralization during web page generation. Exploitation in the wild and remediation details are not fully specified in the initia...

PT-2024-35327 · Elementor · Elementor Portfolio Builder

Name of the Vulnerable Software and Affected Versions: Elementor Portfolio Builder versions prior to 1.0.0 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows DOM-Based XSS. Recommendations: For...

WordPress plugin Elementor Portfolio Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Elementor Portfolio Builder plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Gab Patchstack Alliance in WordPress Plugin Elementor Portfolio Builder versions = 1.0.0...

WordPress Elementor Portfolio Builder Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Elementor Portfolio Builder Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52486 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c77f784f7fc3 Credits Gab Required privilege...