CVE-2024-51678

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marcel Pol Elo Rating Shortcode elo-rating-shortcode allows Stored XSS.This issue affects Elo Rating Shortcode: from n/a through = 1.0.3...

CVE-2024-51682

CVE-2024-51682 is a stored XSS in HasThemes HT Builder – WordPress Theme Builder for Elementor (HT Builder) up to version 1.3.0. The vulnerability arises from improper input neutralization during web page generation, allowing stored XSS. Patchstack indicates fixed in 1.3.1; Red Hat/ENISA referenc...

CVE-2024-51681: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeRevolution WP Pocket URLs wp-pocket-urls allows Stored XSS.This issue affects WP Pocket URLs: from n/a through = 1.0.3...

CVE-2024-49641

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tidaweb Tida URL Screenshot tida-url-screenshot allows Reflected XSS.This issue affects Tida URL Screenshot: from n/a through = 1.0.1...

CVE-2024-49636

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in woracal Agile Video Player Lite agile-video-player allows Reflected XSS.This issue affects Agile Video Player Lite: from n/a through = 1.0...

CVE-2024-47640

CVE-2024-47640 affects the WP ERP WordPress plugin: a reflected XSS in WP ERP

CVE-2024-49639

CVE-2024-49639 concerns a Reflected XSS in the WordPress Monitor.chat plugin (versions n/a through 1.1.1). The initial description confirms Reflected XSS affecting Monitor.chat

CVE-2024-49673

CVE-2024-49673 concerns the WordPress LaTeX2HTML plugin where the vulnerability is a reflected Cross-Site Scripting (XSS) in versions n/a through 2.5.4. The issue is described as improper input neutralization during web page generation. Public sources in connected documents indicate the vulnerabi...

CVE-2024-49692

CVE-2024-49692 affects the WordPress AffiliateX plugin (versions

PT-2024-33599

Name of the Vulnerable Software and Affected Versions ioannup Code Generate versions n/a through 1.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations For versions...

PT-2024-33592

Name of the Vulnerable Software and Affected Versions Risk Warning Bar versions n/a through 1.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations For versions n/a...

PT-2024-33596

Name of the Vulnerable Software and Affected Versions Rafasashi Todo Custom Field versions n/a through 3.0.4 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations For...

CVE-2024-49643: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fifthsegment Whitelist fifthsegment-whitelist allows Reflected XSS.This issue affects Whitelist: from n/a through = 3.5...

CVE-2024-49648: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rafasashi SVG Captcha svg-captcha allows Reflected XSS.This issue affects SVG Captcha: from n/a through = 1.0.11...

CVE-2024-49650: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xarbo BuddyPress Greeting Message bp-greeting-message allows Reflected XSS.This issue affects BuddyPress Greeting Message: from n/a through = 1.0.3...

CVE-2024-49662: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webgensis Simple Load More simple-load-more allows Reflected XSS.This issue affects Simple Load More: from n/a through = 1.0...

CVE-2024-49664: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in chatplusjp chatplusjp chatplusjp allows Reflected XSS.This issue affects chatplusjp: from n/a through = 1.02...

CVE-2024-44081: Improper Neutralization of Input During Web Page Generation

In Jitsi Meet before 2.0.9779, the functionality to share a video file was implemented in an insecure way, resulting in clients loading videos from an arbitrary URL if a message from another participant contains a URL encoded in the expected format...

CVE-2024-49642: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rafasashi Todo Custom Field todo-custom-field allows Reflected XSS.This issue affects Todo Custom Field: from n/a through = 3.0.4...

CVE-2024-50411: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kevon Adonis WP Abstracts wp-abstracts-manuscripts-manager allows Stored XSS.This issue affects WP Abstracts: from n/a through = 2.7.1...