5516 matches found
CVE-2024-32723: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Code Tides Advanced Floating Content allows Stored XSS.This issue affects Advanced Floating Content: from n/a through 1.2.5...
PT-2024-24909
Name of the Vulnerable Software and Affected Versions WebToffee WooCommerce Shipping Label versions 2.3.8 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...
CVE-2024-32697
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HelloAsso allows Stored XSS.This issue affects HelloAsso: from n/a through 1.1.5...
CVE-2024-32697
Technical details about CVE-2024-32697 (HelloAsso) are not provided in the supplied documents. Monitor official advisories and vendor/security partner updates for full technical specifics and remediation.
CVE-2024-32553
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in looksawesome Superfly Menu superfly-menu.This issue affects Superfly Menu: from n/a through = 5.0.25...
CVE-2024-32602
CVE-2024-32602 is an SQL Injection flaw in OnTheGoSystems WooCommerce Multilingual & Multicurrency (affecting 5.3.3.1 and earlier). Root cause: improper neutralization of SQL elements in the plugin’s queries. Impact: high risk to confidentiality and integrity of database content; authenticated at...
CVE-2023-49768
The CVE-2023-49768 issue is a Stored XSS in WP-FormAssembly (FormAssembly) for WordPress, caused by improper input neutralization during web page generation. Affected: WP-FormAssembly up to version 2.0.10 (Authenticated use level: Contributor+). The connected Red Hat and Wordfence entries corrobo...
CVE-2024-32582
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bowo Debug Log Manager allows Stored XSS.This issue affects Debug Log Manager: from n/a through 2.3.1...
CVE-2024-32583
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Photo Gallery Team Photo Gallery by 10Web allows Reflected XSS.This issue affects Photo Gallery by 10Web: from n/a through 1.8.21...
CVE-2024-32576
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Booking Algorithms BA Book Everything allows Stored XSS.This issue affects BA Book Everything: from n/a through 1.6.8...
CVE-2024-32564
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPXPO PostX ultimate-post allows DOM-Based XSS.This issue affects PostX: from n/a through = 4.0.1...
CVE-2024-32553
The looks_awesome Superfly Menu WordPress plugin (versions
CVE-2024-32556 WordPress HurryTimer plugin <=2.9.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nabil Lemsieh HurryTimer allows Stored XSS.This issue affects HurryTimer: from n/a through 2.9.2...
CVE-2024-32558
CVE-2024-32558 is a reflected XSS in the WordPress plugin “eCommerce Product Catalog” by impleCode, affecting versions from unknown up to 3.3.32. The issue stems from improper input neutralization during web page generation, enabling Reflected XSS payloads. Wordfence/Red Hat entries indicate the ...
CVE-2024-32564
CVE-2024-32564 affects Post Grid Gutenberg Blocks and PostX (Post Grid for WordPress) with a Stored XSS in Post Grid blocks (improper input neutralization during page generation). Affected versions: PostX – Gutenberg Blocks for Post Grid up to 4.0.1. Root cause: improper neutralization of input; ...
CVE-2024-32565
CVE-2024-32565 affects App Builder (Appcheap.IO) WordPress plugin. It is a Stored XSS via Shortcode caused by improper input neutralization during web page generation, affecting App Builder versions up to 3.8.8 (from n/a). The vulnerability is documented with a 3.8.8 upper bound and a Patch Statu...
CVE-2024-32568
The Melapress WP 2FA WordPress plugin (versions ≤ 2.6.2 ) is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw due to improper neutralization of input during web page generation. An attacker can inject malicious scripts into a website, which may lead to the theft of user data or unauthori...
CVE-2024-32570 WordPress Cornerstone plugin <= 0.8.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Archetyped Cornerstone allows Reflected XSS.This issue affects Cornerstone: from n/a through 0.8.0...
CVE-2024-32573
CVE-2024-32573 is a Stored XSS in the WP-Lister Lite for eBay WordPress plugin. Affected: WP-Lister Lite for eBay, from n/a through 3.5.11. Root cause: improper neutralization during web page generation. Impact: Low confidentiality/integrity/availability if exploited; exploit requires stored inpu...
CVE-2024-32574
CVE-2024-32574 is a Reflected XSS in the WordPress plugin WP Simple HTML Sitemap, affecting versions <= 2.8. The flaw arises from improper neutralization of input during page generation, enabling attackers to inject scripts via input parameters. The vulnerability is documented as patched in ve...