5755 matches found
Eliz Panel 跨站脚本漏洞
Eliz Panel is a control panel from Eliz, Inc. A cross-site scripting vulnerability exists in Eliz Panel versions prior to 2.3.24, which stems from incorrect neutralization of input during web page generation, allowing for reflection-based cross-site scripting attacks...
CVE-2024-43975 WordPress Super Store Finder plugin <= 6.9.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in highwarden Super Store Finder allows Cross-Site Scripting XSS.This issue affects Super Store Finder: from n/a through 6.9.7...
CVE-2024-43987
CVE-2024-43987 is a stored XSS in the WordPress theme Sliding Door (Aka Sliding Door plugin) due to improper input neutralization during page generation. Affected versions are n/a through 3.6. Public sources identify the vulnerability as Stored XSS in Sliding Door and reference a remediation path...
CVE-2024-43988
CVE-2024-43988 involves a Stored XSS in the Mystique WordPress theme by digitalnature caused by improper neutralization of input during web page generation. Affected: Mystique up to 2.5.7 (n/a through 2.5.7). The issue enables injection of malicious scripts via user input embedded in generated pa...
CVE-2024-45452
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CryoutCreations Septera septera allows Stored XSS.This issue affects Septera: from n/a through 1.5.1...
CVE-2024-44049
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeHunk Gutenberg Blocks unlimited-blocks.This issue affects Gutenberg Blocks: from n/a through = 1.2.8...
CVE-2024-44047
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in IDX Broker IMPress for IDX Broker allows Stored XSS.This issue affects IMPress for IDX Broker: from n/a through 3.2.2...
CVE-2024-44047
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IDX Broker IMPress for IDX Broker idx-broker-platinum allows Stored XSS.This issue affects IMPress for IDX Broker: from n/a through = 3.2.2...
CVE-2024-44047
The CVE-2024-44047 entry concerns the WordPress plugin IMPress for IDX Broker (
CVE-2024-43985
CVE-2024-43985 is a stored XSS vulnerability in the MagePeople WordPress plugin “Bus Ticket Booking with Seat Reservation” (WPBusTicketly) up to version 5.3.5. The issue stems from improper input neutralization during web page generation, enabling stored cross-site scripting via user-supplied inp...
CVE-2024-45451
CVE-2024-45451 describes a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress Roseta theme by CryoutCreations. The issue arises from improper neutralization of input during web page generation, enabling XSS in Roseta versions up to and including 1.3.0. The connected documents consis...
CVE-2024-45452
CVE-2024-45452 is a stored XSS in the WordPress Septera theme (CryoutCreations Septera)
CVE-2024-38860
Improper neutralization of input in Checkmk before versions 2.3.0p16 and 2.2.0p34 allows attackers to craft malicious links that can facilitate phishing attacks...
CVE-2024-38860 Reflected links in error message facilitate phishing attacks
Improper neutralization of input in Checkmk before versions 2.3.0p16 and 2.2.0p34 allows attackers to craft malicious links that can facilitate phishing attacks...
CVE-2024-38860 Reflected links in error message facilitate phishing attacks
Improper neutralization of input in Checkmk before versions 2.3.0p16 and 2.2.0p34 allows attackers to craft malicious links that can facilitate phishing attacks...
CVE-2024-7873
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting', Improper Encoding or Escaping of Output, CWE - 83 Improper Neutralization of Script in Attributes in a Web Page vulnerability in Veribilim Software Veribase Order allows Stored XSS, Cross-Site Scripting XSS...
Checkmk 安全漏洞
Checkmk is an IT monitoring platform from Checkmk, Inc. A security vulnerability exists in Checkmk versions 2.3.0 and 2.2.0 that stems from incorrect neutralization of inputs and allows an attacker to craft malicious links that could facilitate phishing attacks...
CVE-2024-44059
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ronald Huereca Custom Query Blocks post-type-archive-mapping allows DOM-Based XSS.This issue affects Custom Query Blocks: from n/a through = 5.3.1...
CVE-2024-44058
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CryoutCreations Parabola allows Stored XSS.This issue affects Parabola: from n/a through 2.4.1...