CVE-2024-51855

Productineer Redirecter is affected by DOM-Based XSS due to improper neutralization of input during web page generation. CVE-2024-51855 applies to Redirecter versions n/a through 1.0. Root cause: inadequate input sanitization in page rendering. Impact is DOM-based XSS as described in connected Re...

CVE-2024-51890

CVE-2024-51890 is a stored XSS vulnerability affecting the Geoportail Shortcode plugin for WordPress, with affected versions from n/a through 2.4.4. The issue is described as Improper Neutralization of Input During Web Page Generation. Public sources in connected documents confirm Geoportail Shor...

CVE-2024-51892

CVE-2024-51892 describes a Stored XSS in the WordPress plugin Sell Media File with Stripe (naa986) affecting versions up to 1.0.6. The root cause is improper input neutralization during web page generation . Affected software is listed as from n/a through 1.0.6. Remediation recommended: update to...

CVE-2024-51907

CVE-2024-51907: The WP Virtual Room Configurator plugin (codemenschen) has a Stored XSS in versions 1.0.0 and earlier due to improper input neutralization during page generation. Public sources corroborate a WordPress plugin vulnerability affecting WP Virtual Room Configurator up to 1.0.0 with re...

CVE-2024-51928

CVE-2024-51928 is a WordPress plugin vulnerability in Blocks Post Grid (

PT-2024-35066

Name of the Vulnerable Software and Affected Versions Cookie Nonsense for YT versions 1.2.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for DOM-Based XSS. Recommendations For versions...

PT-2024-35045

Name of the Vulnerable Software and Affected Versions Lilaea Media IntelliWidget Elements versions n/a through 2.2.7 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing DOM-Based XSS. This means that an...

PT-2024-34968

Name of the Vulnerable Software and Affected Versions Wd-image-magnifier-xoss versions 1.0 and earlier Description The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting'. This allows for DOM-Based XSS attacks. Recommendations F...

PT-2024-35002

Name of the Vulnerable Software and Affected Versions Luzuk Testimonials versions 0.0.1 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject malicious...

PT-2024-34294

Name of the Vulnerable Software and Affected Versions: Pricer Ninja versions n/a through 2.1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For versions n/...

PT-2024-34993

Name of the Vulnerable Software and Affected Versions Team Profit-Funnels PF Timer versions n/a through 1.0.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in Team Profit-Funnels PF...

PT-2024-35015

Name of the Vulnerable Software and Affected Versions Takashi Matsuyama Posts Search versions 1.2.2 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means an attacker can inject...

PT-2024-35017

Name of the Vulnerable Software and Affected Versions Takashi Matsuyama Posts Filter versions n/a through 1.3.1 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations...

PT-2024-35025

Name of the Vulnerable Software and Affected Versions Topbar ID for Elementor versions 1.0.1 and earlier Description The issue affects the Topbar ID for Elementor plugin, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This is a high-severity XSS...

PT-2024-34315

Name of the Vulnerable Software and Affected Versions: Stefano Marra Smart Mockups versions 1.2.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations:...

PT-2024-34955

Name of the Vulnerable Software and Affected Versions Beacon For Help Scout versions 1.3.0 and earlier Description The issue affects the Beacon For Help Scout plugin, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This can lead to cross-site scripting...

PT-2024-35046

Name of the Vulnerable Software and Affected Versions Mapme versions 1.3.2 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into the website, potential...

CVE-2024-51851: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in salehattari best bootstrap widgets for elementor best-bootstrap-widgets-for-elementor allows DOM-Based XSS.This issue affects best bootstrap widgets for elementor: from n/a through = 1.0...

CVE-2024-51936: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eSparkBiz ESB Testimonials esb-testimonials allows Stored XSS.This issue affects ESB Testimonials: from n/a through = 1.0.0...

CVE-2024-51923: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Websand Websand Subscription Form websand-subscription-form allows Stored XSS.This issue affects Websand Subscription Form: from n/a through = 1.0.3...