CVE-2024-33554

CVE-2024-33554 : Reflected XSS in 8theme XStore Core due to improper input neutralization during web page generation. Affected: XStore Core from n/a up to 5.3.5. Consequences include potential script execution in a victim’s browser when interacting with vulnerable pages. Connected sources (e.g., ...

CVE-2024-33640

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LBell Pretty Google Calendar allows Stored XSS.This issue affects Pretty Google Calendar: from n/a through 1.7.2...

CVE-2024-33643

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kailey Lampert Advanced Most Recent Posts Mod allows Stored XSS.This issue affects Advanced Most Recent Posts Mod: from n/a through 1.6.5.2...

CVE-2024-33571

CVE-2024-33571 is a Reflected XSS vulnerability in VOD Infomaniak (Infomaniak Staff VOD) for WordPress. The vulnerability affects VOD Infomaniak versions from n/a up to 1.5.6 and is triggered via improper input handling during web page generation. The connected Wordfence/KV data confirms the exis...

CVE-2024-33640

CVE-2024-33640 is a stored XSS in the Pretty Google Calendar WordPress plugin (LBell Pretty Google Calendar) affecting versions up to 1.7.2. Root cause: improper neutralization of user input during web page generation, enabling stored cross-site scripting. Impact per CVSS: low confidentiality, in...

CVE-2024-33645

CVE-2024-33645 refers to an “Improper Neutralization of Input During Web Page Generation” in the Easy Set Favicon WordPress plugin (affected: Easy Set Favicon, up to version 1.1, has n/a as lower bound). The vulnerability enables a Reflected XSS as stated in the CVE description. Core details from...

CVE-2024-33648

CVE-2024-33648 is a Stored XSS in Recencio Book Reviews (WordPress plugin). Affected: Recencio Book Reviews versions up to 1.66.0. Issue arises from improper neutralization of input during web page generation. CVSS v3.1 base score 6.5 (Medium); attack requires user interaction and is exploitable ...

CVE-2024-4234

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sayful Islam Filterable Portfolio allows Stored XSS.This issue affects Filterable Portfolio: from n/a through 1.6.4...

CVE-2024-33696

CVE-2024-33696 describes a stored cross-site scripting vulnerability in the Broadstreet XPRESS WordPress Ad Widget. The Red Hat security entry mirrors this vulnerability, noting the issue as an “Improper Neutralization of Input During Web Page Generation” affecting the WordPress Ad Widget until v...

CVE-2024-33598

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Twinpictures Annual Archive allows Stored XSS.This issue affects Annual Archive: from n/a through 1.6.0...

CVE-2024-33598

Technical details about CVE-2024-33598 are not provided in the Connected Documents. The Initial description notes a Stored XSS in the WordPress Annual Archive (up to 1.6.0). Monitor for updates; no specifics on affected versions, vectors, or remediation are included.

VulnCheck KEV: CVE-2024-33551

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in 8theme XStore Core allows SQL Injection.This issue affects XStore Core: from n/a through 5.3.5...

CVE-2023-23989

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Metagauss RegistrationMagic.This issue affects RegistrationMagic: from n/a through 5.1.9.2...

CVE-2023-23989

CVE-2023-23989 affects the WordPress RegistrationMagic plugin up to version 5.1.9.2. It is an Improper Neutralization of Input During Web Page Generation (XSS) vulnerability causing content injection via untrusted input in RegistrationMagic. Root cause: insufficient input sanitization during page...

CVE-2024-32702

CVE-2024-32702 is a Reflected XSS in ARForms (WordPress). Affected ARForms versions are up to and including 6.4; patched in 6.4. Exploitation details are not provided in the sources; the vulnerability arises from improper input neutralization during web page generation. Remediation per sources: u...

CVE-2024-32721

CVE-2024-32721 concerns the WordPress Jeg Elementor Kit plugin, with Stored XSS in the Testimonial Widget Attributes affecting versions up to 2.6.3. Red Hat notes insufficient input sanitization and output escaping, enabling authenticated attackers with contributor access or higher to inject scri...

CVE-2024-32723

CVE-2024-32723 affects the WordPress plugin Advanced Floating Content Lite (v0 through 1.2.5). It is a Stored XSS due to improper neutralization of input during web page generation. The connected documents do not provide a specific exploit path or a confirmed fix/version beyond the affected range.

CVE-2024-32952

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BloomPixel Max Addons Pro for Bricks allows Reflected XSS.This issue affects Max Addons Pro for Bricks: from n/a through 1.6.1...

CVE-2024-32791

CVE-2024-32791 affects Premium Addons for Elementor (LeaP13 Premium Addons for Elementor) with a Stored XSS in versions up to 4.10.25 due to improper input neutralization during web page generation. Affected product: Premium Addons for Elementor. Root cause: insufficient escaping/validation of sh...

CVE-2024-32801

Technical details for CVE-2024-32801 are not provided in the connected documents. No specifics on affected product/version/root cause/fix are given beyond the initial XSS description. Monitor for updates.