CVE-2024-51851: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in salehattari best bootstrap widgets for elementor best-bootstrap-widgets-for-elementor allows DOM-Based XSS.This issue affects best bootstrap widgets for elementor: from n/a through = 1.0...

CVE-2024-51799: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vadim Bogaiskov Bg Patriarchia BU bg-patriarchia-bu allows DOM-Based XSS.This issue affects Bg Patriarchia BU: from n/a through = 2.2.3...

CVE-2024-50522: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in redyyu WeChat Subscribers Lite wechat-subscribers-lite allows Reflected XSS.This issue affects WeChat Subscribers Lite : from n/a through = 1.6.6...

CVE-2024-51916: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative Brahma Multifox Plus multifox-plus allows DOM-Based XSS.This issue affects Multifox Plus: from n/a through = 1.1.6...

PT-2024-34955

Name of the Vulnerable Software and Affected Versions Beacon For Help Scout versions 1.3.0 and earlier Description The issue affects the Beacon For Help Scout plugin, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This can lead to cross-site scripting...

PT-2024-34327

Name of the Vulnerable Software and Affected Versions: Bonway Static Block Editor versions 1.1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for DOM-Based XSS attacks. Recommendations...

PT-2024-34299

Name of the Vulnerable Software and Affected Versions: WeChat Subscribers Lite versions 1.6.6 and earlier Description: The issue affects WeChat Subscribers Lite, allowing Reflected XSS due to improper neutralization of input during web page generation. This is a type of Cross-site Scripting...

PT-2024-34932

Name of the Vulnerable Software and Affected Versions Awesome Fitness Testimonials versions 1.0.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations Fo...

PT-2024-34310

Name of the Vulnerable Software and Affected Versions: Events Manager Pro – extended versions 0.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS. Recommendations: For...

PT-2024-35066

Name of the Vulnerable Software and Affected Versions Cookie Nonsense for YT versions 1.2.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for DOM-Based XSS. Recommendations For versions...

PT-2024-35015

Name of the Vulnerable Software and Affected Versions Takashi Matsuyama Posts Search versions 1.2.2 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means an attacker can inject...

PT-2024-34968

Name of the Vulnerable Software and Affected Versions Wd-image-magnifier-xoss versions 1.0 and earlier Description The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting'. This allows for DOM-Based XSS attacks. Recommendations F...

PT-2024-35030

Name of the Vulnerable Software and Affected Versions SEO Themes Simple Pricing Table versions prior to 1.0.0 Description The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into...

PT-2024-35046

Name of the Vulnerable Software and Affected Versions Mapme versions 1.3.2 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into the website, potential...

PT-2024-35045

Name of the Vulnerable Software and Affected Versions Lilaea Media IntelliWidget Elements versions n/a through 2.2.7 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing DOM-Based XSS. This means that an...

PT-2024-35021

Name of the Vulnerable Software and Affected Versions geoWP Geoportail Shortcode versions through 2.4.4 Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This can be exploited by attackers. The...

PT-2024-35002

Name of the Vulnerable Software and Affected Versions Luzuk Testimonials versions 0.0.1 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject malicious...

PT-2024-35017

Name of the Vulnerable Software and Affected Versions Takashi Matsuyama Posts Filter versions n/a through 1.3.1 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations...

CVE-2024-51897: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Erik Saulnier News Articles news-articles allows Stored XSS.This issue affects News Articles: from n/a through = 1.0.0...

CVE-2024-51825: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in crissoca Alert Me! alert-me allows DOM-Based XSS.This issue affects Alert Me!: from n/a through = 0.4.0...