Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 8:05 a.m.•17 views

CVE-2024-51911

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ketan Patel Featured product by category name featured-product-by-category-name allows DOM-Based XSS.This issue affects Featured product by category name: from n/a through = 1.1...

6.5CVSS7.2AI score0.00297EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/19 5:15 p.m.•26 views

CVE-2024-51911

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ketan Patel Featured product by category name featured-product-by-category-name allows DOM-Based XSS.This issue affects Featured product by category name: from n/a through = 1.1...

6.5CVSS0.00297EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/19 4:31 p.m.•77 views

CVE-2024-51911

CVE-2024-51911 is a DOM-based Cross-Site Scripting vulnerability in the WordPress plugin “Featured product by category name” (author: Ketan Patel) affecting version up to 1.1. The vulnerability arises from improper input neutralization during web page generation, enabling DOM-based XSS. The CVE e...

6.5CVSS7.2AI score0.00297EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/19 12:00 a.m.•6 views

PT-2024-35044

Name of the Vulnerable Software and Affected Versions Ketan Patel Featured product by category name versions n/a through 1.1 Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could potential...

6.5CVSS0.00297EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•6 views

CVE-2024-51911: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ketan Patel Featured product by category name featured-product-by-category-name allows DOM-Based XSS.This issue affects Featured product by category name: from n/a through = 1.1...

6.5CVSS5.8AI score0.00297EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/11/08 4:31 p.m.•18 views

WordPress Featured product by category name plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Featured product by category name versions = 1.1...

6.5CVSS6.1AI score0.00297EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/11/08 12:00 a.m.•17 views

WordPress Featured product by category name Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)

Software Featured product by category name Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51911 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b5ac12bf6fc4 Credits SOPROBRO Required...

6.5CVSS6.5AI score0.00297EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder