CVE-2024-32139

CVE-2024-32139 : Podlove Podlove Podcast Publisher for WordPress contains an authenticated SQL Injection flaw (improper neutralization of input in SQL commands). Affected versions are Podlove Podlove Podcast Publisher

CVE-2024-32429

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPChill Remove Footer Credit allows Stored XSS.This issue affects Remove Footer Credit: from n/a through 1.0.13...

CVE-2024-32133

CVE-2024-32133 is a reflected XSS in the EZ Form Calculator WordPress plugin (EZ Form Calculator) affecting versions up to 2.14.0.3. The vulnerability is documented as not patched in the connected material; no mitigation or patches are described within the provided documents.

CVE-2024-32453

CVE-2024-32453 : Stored XSS in the POEditor WordPress plugin (

CVE-2024-32138: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in KaizenCoders Short URL allows Reflected XSS.This issue affects Short URL: from n/a through 1.6.8...

CVE-2024-32147: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Form Plugin Team - GhozyLab Easy Contact Form Lite allows Stored XSS.This issue affects Easy Contact Form Lite : from n/a through 1.1.23...

PT-2024-24429

Name of the Vulnerable Software and Affected Versions Nasirahmed Forms to Zapier, Integromat, IFTTT, Workato, Automate.Io, elastic.Io, Built.Io, APIANT, Webhook versions n/a through 1.1.12 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special...

CVE-2024-31387

CVE-2024-31387 affects the Popup Like box – Page Plugin for WordPress (Popup Like box). It is a Stored XSS due to Improper Neutralization of Input During Web Page Generation, impacting versions from n/a to 3.7.2. The root cause is improper handling of input in web page generation, enabling stored...

CVE-2024-31928

Consolidated view: CVE-2024-31928 affects the WP Darko Top Bar (WordPress plugin). It is a stored XSS caused by improper input neutralization during web page generation, affecting Top Bar versions up to 3.0.5 (n/a to 3.0.5). Root cause: inadequate sanitization of input that is embedded into gener...

CVE-2024-31930: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pdfcrowd Save as PDF plugin by Pdfcrowd allows Stored XSS.This issue affects Save as PDF plugin by Pdfcrowd: from n/a through 3.2.1...

CVE-2024-31925: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FAKTOR VIER F4 Improvements allows Stored XSS.This issue affects F4 Improvements: from n/a through 1.8.0...

CVE-2024-31928: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Darko Top Bar allows Stored XSS.This issue affects Top Bar: from n/a through 3.0.5...

CVE-2023-47542

A improper neutralization of special elements used in a template engine CWE-1336 in FortiManager versions 7.4.1 and below, versions 7.2.4 and below, and 7.0.10 and below allows attacker to execute unauthorized code or commands via specially crafted templates...

PT-2024-24016 · Aikit · Aikit

Name of the Vulnerable Software and Affected Versions: AIKit versions through 4.14.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting malicious SQL cod...

CVE-2024-28191: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Contao is an open source content management system. Starting in version 4.0.0 and prior to version 4.13.40 and 5.3.4, it is possible to inject insert tags in frontend forms if the output is structured in a very specific way. Contao versions 4.13.40 and 5.3.4 have a patch for this issue. As a...

CVE-2024-23189: Improper Neutralization of Input During Web Page Generation

Embedded content references at tasks could be used to temporarily execute script code in the context of the users browser session. To exploit this an attacker would require temporary access to the users account, access to another account within the same context or an successful social engineering...

CVE-2024-31346

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Blocksmarket Gradient Text Widget for Elementor allows Stored XSS.This issue affects Gradient Text Widget for Elementor: from n/a through 1.0.1...

CVE-2024-31258

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Micro.Company Form to Chat App allows Stored XSS.This issue affects Form to Chat App: from n/a through 1.1.6...

CVE-2024-31255

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ELEXtensions ELEX WooCommerce Dynamic Pricing and Discounts allows Reflected XSS.This issue affects ELEX WooCommerce Dynamic Pricing and Discounts: from n/a through 2.1.2...

CVE-2024-31257

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Formsite Formsite | Embed online forms to collect orders, registrations, leads, and surveys allows Stored XSS.This issue affects Formsite | Embed online forms to collect orders, registrations, lead...