CVE-2024-31387

CVE-2024-31387 affects the Popup Like box – Page Plugin for WordPress (Popup Like box). It is a Stored XSS due to Improper Neutralization of Input During Web Page Generation, impacting versions from n/a to 3.7.2. The root cause is improper handling of input in web page generation, enabling stored...

CVE-2024-31928

Consolidated view: CVE-2024-31928 affects the WP Darko Top Bar (WordPress plugin). It is a stored XSS caused by improper input neutralization during web page generation, affecting Top Bar versions up to 3.0.5 (n/a to 3.0.5). Root cause: inadequate sanitization of input that is embedded into gener...

CVE-2023-47542

A improper neutralization of special elements used in a template engine CWE-1336 in FortiManager versions 7.4.1 and below, versions 7.2.4 and below, and 7.0.10 and below allows attacker to execute unauthorized code or commands via specially crafted templates...

PT-2024-24016 · Aikit · Aikit

Name of the Vulnerable Software and Affected Versions: AIKit versions through 4.14.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting malicious SQL cod...

CVE-2024-31346

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Blocksmarket Gradient Text Widget for Elementor allows Stored XSS.This issue affects Gradient Text Widget for Elementor: from n/a through 1.0.1...

CVE-2024-31258

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Micro.Company Form to Chat App allows Stored XSS.This issue affects Form to Chat App: from n/a through 1.1.6...

CVE-2024-31255

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ELEXtensions ELEX WooCommerce Dynamic Pricing and Discounts allows Reflected XSS.This issue affects ELEX WooCommerce Dynamic Pricing and Discounts: from n/a through 2.1.2...

CVE-2024-31257

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Formsite Formsite | Embed online forms to collect orders, registrations, leads, and surveys allows Stored XSS.This issue affects Formsite | Embed online forms to collect orders, registrations, lead...

CVE-2024-31234

CVE-2024-31234 affects the REHub Framework (WordPress) with an authenticated SQL Injection vulnerability in the framework prior to version 19.6.2. The issue is due to improper neutralization of special elements used in SQL commands. Evidence in connected RH data confirms the vulnerability, its au...

CVE-2024-31256

CVE-2024-31256 is a Reflected XSS in the WordPress WebinarPress (WP Webinar System) plugin. Affected: WebinarPress versions up to 1.33.10. Root cause: improper neutralization of input during web page generation. Impact: potential disclosure/remote script execution via crafted input (low to modera...

CVE-2024-31257

CVE-2024-31257 affects the Formsite WordPress plugin (Embed online forms) up to version 1.6. The vulnerability is a Stored XSS caused by improper input neutralization during web page generation. Exploitation requires user authentication (Contributor+). Impact is stored cross-site scripting within...

WordPress Plugin Edwiser Bridge 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL.WordPress plugin i...

CVE-2024-25007 Ericsson Network Manager - Improper Neutralization of Formula Elements Vulnerability

Ericsson Network Manager ENM, versions prior to 23.1, contains a vulnerability in the export function of application log where Improper Neutralization of Formula Elements in a CSV File can lead to code execution or information disclosure. There is limited impact to integrity and availability. The...

PT-2024-20696 · Ericsson · Ericsson Network Manager

Name of the Vulnerable Software and Affected Versions: Ericsson Network Manager ENM versions prior to 23.1 Description: The issue is related to the export function of the application log, where improper neutralization of formula elements in a CSV file can lead to code execution or information...

CVE-2024-27972

Improper Control of Generation of Code 'Code Injection' vulnerability in Jack Arturo WP Fusion Lite wp-fusion-lite.This issue affects WP Fusion Lite: from n/a through = 3.41.24...

CVE-2024-30554

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wouter Dijkstra DD Rating allows Stored XSS.This issue affects DD Rating: from n/a through 1.7.1...

CVE-2024-30524

CVE-2024-30524 : Stored XSS in RedLettuce PDF Viewer for Elementor caused by improper input neutralization during web page generation. Affected: PDF Viewer for Elementor versions up to 2.9.3 (vendor listing notes “from n/a through 2.9.3”). CVSS v3.1 base score 5.4 (medium); impact limited to conf...

CVE-2024-30550

CVE-2024-30550 refers to an XSS vulnerability in wpdevart’s Responsive Image Gallery / Gallery Album. The issue is described as Reflected Cross-Site Scripting due to improper input neutralization during web page generation, affecting Gallery Album versions from n/a through 2.0.3. Connected source...

CVE-2024-30551

CVE-2024-30551 (Sticky Anything, Toast Stick Anything WordPress plugin) is an unauthenticated Stored XSS in Sticky Anything, affecting versions up to 2.1.5. The CVSSv3.1 score is 7.1 (HIGH) with Network attack vector, no privileges, user interaction required, and changed scope; impact to confiden...

CVE-2024-30556

Technical details beyond the initial description for CVE-2024-30556 are not present in the connected documents. The vulnerability is described as Stored XSS in Mighty Classic Pros And Cons plugin; no further product/version specifics or patch info are provided here. Monitor for updates.