5756 matches found
CVE-2024-51816
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saul Morales Pacheco Banner System banner-system allows Stored XSS.This issue affects Banner System: from n/a through = 1.0.0...
CVE-2024-51810
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in George Lewe Lewe Bootstrap Visuals shortcode-bootstrap-visuals allows Stored XSS.This issue affects Lewe Bootstrap Visuals: from n/a through = 3.0.1...
CVE-2024-51811
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hussam Hussien Popup Image popup-image allows Stored XSS.This issue affects Popup Image: from n/a through = 1.0.1...
CVE-2024-51808
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pat O’Brien codeSnips codesnips allows Stored XSS.This issue affects codeSnips: from n/a through = 1.2...
CVE-2024-51801
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jakeatthrive Brand my Footer brand-my-footer allows DOM-Based XSS.This issue affects Brand my Footer: from n/a through = 1.1...
CVE-2024-51798
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Surbma Surbma | Font Awesome surbma-font-awesome allows DOM-Based XSS.This issue affects Surbma | Font Awesome: from n/a through = 3.0...
CVE-2024-50556
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WorldMarkerter WM Zoom wm-zoom allows DOM-Based XSS.This issue affects WM Zoom: from n/a through = 1.0...
CVE-2024-50547
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mark Hodder Themedy Toolbox themedy-toolbox allows DOM-Based XSS.This issue affects Themedy Toolbox: from n/a through = 1.0.16...
CVE-2024-50536
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tamer Ziady GDReseller gdreseller allows DOM-Based XSS.This issue affects GDReseller: from n/a through = 1.6...
CVE-2024-50532
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jerin K Alexander Events Manager Pro – extended events-manager-pro-extended allows Reflected XSS.This issue affects Events Manager Pro – extended: from n/a through = 0.1...
CVE-2024-50513
The CVE-2024-50513 vulnerability affects WordPress PostX plugin (Post Grid Gutenberg Blocks and WordPress Blog Plugin) versions up to and including 4.1.15. The underlying flaw is improper neutralization of input during web page generation, enabling Stored XSS. Impact is described as stored XSS wi...
CVE-2024-50516
CVE-2024-50516 affects WordPress Countdown & Clock plugin, specifically versions up to 2.8.0.9 (WordPress Countdown & Clock). The vulnerability is a Cross-Site Scripting (Stored XSS) due to improper input neutralization during web page generation, as described by multiple sources. The CVE descrip...
CVE-2024-50522 WordPress WeChat Subscribers Lite plugin <= 1.6.6 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in redyyu WeChat Subscribers Lite wechat-subscribers-lite allows Reflected XSS.This issue affects WeChat Subscribers Lite : from n/a through = 1.6.6...
CVE-2024-50536
CVE-2024-50536 concerns the WordPress WordPress GDReseller plugin, affected versions
CVE-2024-50551
CVE-2024-50551 corresponds to a Stored XSS in WordPress plugin EndomondoWP (versions 0.1.1 and earlier). The vulnerability is due to improper neutralization of input during web page generation. Affected software: EndomondoWP
CVE-2024-50556
CVE-2024-50556 affects WordPress WM Zoom plugin versions
CVE-2024-51797 WordPress Ultimate Accordion plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Md. Shiddikur Rahman Ultimate Accordion ultimate-accordion allows DOM-Based XSS.This issue affects Ultimate Accordion: from n/a through = 1.0...
CVE-2024-51799
CVE-2024-51799 affects Bg Patriarchia BU (WordPress plugin) up to version 2.2.3, with a DOM-based Cross-Site Scripting vulnerability caused by improper input neutralization during web page generation. This can enable XSS on pages rendered by Bg Patriarchia BU. Evidence from multiple sources confi...
CVE-2024-51802
CVE-2024-51802 is a DOM-based XSS vulnerability in the Bread & Butter WordPress plugin (Bread & Butter) affecting versions up to 7.4.857. The issue arises from improper neutralization of input during Web Page Generation, enabling cross-site scripting. Multiple connected sources (e.g., Red Hat adv...
CVE-2024-51808
CVE-2024-51808 describes a stored cross-site scripting (XSS) vulnerability in the WordPress plugin “codeSnips.” The issue arises from improper neutralization of input during web page generation, allowing injected scripts to be stored and potentially executed when other users load affected pages. ...