CVE-2024-47115 IBM AIX command execution

IBM AIX 7.2, 7.3 and VIOS 3.1 and 4.1 could allow a local user to execute arbitrary commands on the system due to improper neutralization of input...

CVE-2024-53820

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Stored XSS.This issue affects Captivate Sync: from n/a through = 2.0.22...

CVE-2024-53797

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Beaver Builder Beaver Builder beaver-builder-lite-version allows Stored XSS.This issue affects Beaver Builder: from n/a through = 2.8.4.3...

CVE-2024-11321

CVE-2024-11321 describes a reflected XSS in Hi e-learning’s Learning Management System (LMS) caused by improper input neutralization during web page generation. Affected: LMS versions prior to 06.12.2024. CVSSv3.1 base score 5.4 (Medium) with Network attack vector, Low impact on confidentiality a...

WordPress plugin Arkhe Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...

The vulnerability of the tmp_get_sites function in TP-Link Archer Series, TP-Link Deco Series, and TP-Link Tapo Series routers allows a hacker to execute arbitrary commands.

The vulnerability of the tmpgetsites function in TP-Link Archer Series, TP-Link Deco Series, and TP-Link Tapo Series routers lies in the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2024-52489

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in udidol Add Chat App Button add-whatsapp-button allows Stored XSS.This issue affects Add Chat App Button: from n/a through = 2.1.5...

CVE-2024-52466

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Explara Explara Events explara-events allows Reflected XSS.This issue affects Explara Events: from n/a through = 0.1.3...

CVE-2024-52454 WordPress GoQMieruca plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in goqsystem GoQMieruca goqmieruca allows Reflected XSS.This issue affects GoQMieruca: from n/a through = 1.0.3...

CVE-2024-52454

CVE-2024-52454 affects the WordPress GoQMieruca plugin (GoQMieruca) from GoQSystem Inc. A Reflected XSS flaw arises from improper input neutralization during web page generation, affecting versions up to 1.0.0. Public records indicate a patch exists with version 1.0.1 or later; upgrading to 1.0.1...

CVE-2024-52455

CVE-2024-52455 — WordPress plugin GoQSmile from GoQSystem Inc. suffers a Reflected XSS due to improper input handling. Affected versions include GoQSmile

CVE-2024-52464

CVE-2024-52464: Reflected XSS in WordPress plugin amr shortcodes (versions 1.7 and earlier). Root cause is improper input handling during web page generation, enabling an attacker-controlled input to be reflected in the output. Affected component: amr shortcodes. Impact: Reflected XSS risk on pag...

CVE-2024-52466

CVE-2024-52466 is a WordPress vulnerability in the Explara Events plugin, affecting versions up to 0.1.3. It is a reflected Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. The CVSS 3.1 base score is 7.1 (HIGH) with network attack vector, no privilege...

CVE-2024-52478

CVE-2024-52478 is a Cross-Site Scripting (Stored XSS) vulnerability in the Ben Marshall Jobify – Job Board WordPress Theme, affecting versions up to 4.2.3 (n/a through 4.2.3). The issue arises from improper input neutralization during web page generation. Multiple connected sources explicitly con...

CVE-2024-52492

CVE-2024-52492 details a Stored Cross-Site Scripting (XSS) flaw in the WordPress plugin Image horizontal reel scroll slideshow (versions

WordPress plugin amr shortcodes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-35306 · Unknown · Explara Events

Name of the Vulnerable Software and Affected Versions: Explara Events versions 0.1.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This enables attackers to inject malicious scripts in...

WordPress plugin What Would Seth Godin Do 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in PHP. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site...

WordPress plugin GoQSmile 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Library Bookshelves 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...