5538 matches found
CVE-2024-37275: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NextScripts NextScripts social-networks-auto-poster-facebook-twitter-g allows DOM-Based XSS.This issue affects NextScripts: from n/a through = 4.4.7...
CVE-2024-38692: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Spiffy Plugins Spiffy Calendar allows SQL Injection.This issue affects Spiffy Calendar: from n/a through 4.9.11...
CVE-2024-37432: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ThemeGrill Esteem allows Stored XSS.This issue affects Esteem: from n/a through 1.5.0...
CVE-2024-38708: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders.This issue affects Barcode Scanner with Inventory &...
CVE-2024-37244: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Ninja Team Ninja Beaver Add-ons for Beaver Builder allows Stored XSS.This issue affects Ninja Beaver Add-ons for Beaver Builder: from n/a through 2.4.5...
CVE-2024-37223: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Nicdark Restaurant Reservations allows Stored XSS.This issue affects Restaurant Reservations: from n/a through 2.0...
CVE-2024-37217: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ProWCPlugins Empty Cart Button for WooCommerce allows Stored XSS.This issue affects Empty Cart Button for WooCommerce: from n/a through 1.3.8...
CVE-2024-37100: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Mayur Somani, threeroutes media Elegant Themes Icons allows Stored XSS.This issue affects Elegant Themes Icons: from n/a through 1.3...
CVE-2024-35656: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Elementor Elementor Pro allows Reflected XSS.This issue affects Elementor Pro: from n/a through 3.21.2...
CVE-2024-41709: Improper Neutralization of Input During Web Page Generation
Backdrop CMS before 1.27.3 and 1.28.x before 1.28.2 does not sufficiently sanitize field labels before they are displayed in certain places. This vulnerability is mitigated by the fact that an attacker must have a role with the "administer fields" permission...
CVE-2024-38785
CVE-2024-38785 refers to a stored XSS vulnerability in the Gutenverse plugin for WordPress (Gutenverse: from n/a through 1.9.2). The issue arises from improper neutralization of input during web page generation, enabling cross-site scripting. Public details list affected versions as Gutenverse
CVE-2024-38786
CVE-2024-38786 is a Stored XSS vulnerability in the WordPress theme CoziPress (BurgerThemes) due to improper neutralization during web page generation. Affected versions are listed as CoziPress ≤ 1.0.30. Public details in the connected documents do not provide a confirmed patch or fixed version; ...
CVE-2024-37509
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Maksekeskus AS MakeCommerce for WooCommerce allows Reflected XSS.This issue affects MakeCommerce for WooCommerce: from n/a through 3.5.1...
CVE-2024-37489
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in OceanWP Ocean Extra allows Stored XSS.This issue affects Ocean Extra: from n/a through 2.2.9...
CVE-2024-37495
CVE-2024-37495 is a Stored XSS in Mediavine Create for WordPress, caused by improper neutralization of input during web page generation. Affected: Create by Mediavine versions n/a through 1.9.7. The vulnerability is documented as a cross-site scripting issue that stores user input and could affec...
CVE-2024-37500
CVE-2024-37500 : Beaver Builder for WordPress (Beaver Builder – WordPress Page Builder) contains an Improper Neutralization of Input During Web Page Generation leading to Stored XSS in versions up to 2.8.2.2 (affecting Beaver Builder: from n/a through 2.8.2.2). The issue is caused by insufficient...
CVE-2024-37545
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Nick Halsey Floating Social Media Links allows Stored XSS.This issue affects Floating Social Media Links: from n/a through 1.5.2...
CVE-2024-37519
The CVE-2024-37519 entry concerns Leap13 Premium Blocks – Gutenberg Blocks for WordPress (Premium Blocks) with a Stored XSS vulnerability due to improper neutralization of input during web page generation. Affected versions: 2.1.27 and earlier. The issue is a Cross Site Scripting vulnerability in...
CVE-2024-37521
CVE-2024-37521 describes a Stored XSS vulnerability in the WordPress theme zBench, affecting version 1.4.2 and earlier (no patch information provided in the supplied documents). The description specifies Improper Neutralization of Input During Web Page Generation as the root cause, enabling store...