5754 matches found
CVE-2024-43149
CM Tooltip Glossary (WordPress plugin) is affected by CVE-2024-43149 (Stored XSS). The vulnerability is authenticated and arises from improper input neutralization during web page generation, affecting versions up to 4.3.7. Patch: upgrade to 4.3.7 or newer (the fix is included in 4.3.7).
CVE-2024-43152
CVE-2024-43152 is a stored XSS in the iberezansky 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery WordPress plugin. Root cause: Improper input neutralization during web page generation. Affected: 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery (versions from n/a to 1.15.6). Pu...
CVE-2024-43163 WordPress ParcelPanel plugin <= 4.3.2 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Parcel Panel ParcelPanel allows Reflected XSS.This issue affects ParcelPanel: from n/a through 4.3.2...
CVE-2024-7590 WordPress Spectra plugin<= 2.14.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows DOM-Based XSS.This issue affects Spectra: from n/a through = 2.14.1...
CVE-2024-43227
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPDeveloper BetterDocs allows Stored XSS.This issue affects BetterDocs: from n/a through 3.5.8...
CVE-2024-43233
CVE-2024-43233 is a Reflected XSS in BSK Forms Blacklist (BannerSky) plugin. The issue arises from improper input neutralization during web page generation, enabling crafted input to be reflected back to the user and potentially execute script in the victim’s browser. Affected versions are the BS...
PT-2024-30391 · Wpdeveloper · Wpdeveloper Betterdocs
Name of the Vulnerable Software and Affected Versions: WPDeveloper BetterDocs versions 3.5.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: F...
WordPress plugin Football Pool 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress plugin Filr 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...
WordPress plugin Football Pool 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress plugin YaMaps 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
PT-2024-30384 · 10Web · Form Maker
Name of the Vulnerable Software and Affected Versions: Form Maker by 10Web versions 1.15.26 and earlier Description: This issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. It allows Reflected XSS, which can be exploited by...
WordPress plugin Form Maker by 10Web 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
WordPress plugin BetterDocs 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...
WordPress plugin Selection Lite 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...
WordPress plugin LA-Studio Element Kit for Elementor 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
PT-2024-26730 · Soliloquy · Slider By Soliloquy
Name of the Vulnerable Software and Affected Versions: Slider by Soliloquy versions n/a through 2.7.6 Description: The issue affects the Soliloquy Team Slider, allowing Cross-Site Scripting XSS due to Improper Neutralization of Input During Web Page Generation and Improper Authentication...
CVE-2024-38166
An unauthenticated attacker can exploit improper neutralization of input during web page generation in Microsoft Dynamics 365 to spoof over a network by tricking a user to click on a link...
CVE-2024-38166
CVE-2024-38166 is a cross-site scripting (XSS) vulnerability in Microsoft Dynamics 365 (on-premises and related Dynamics components) caused by improper neutralization of input during web page generation. An unauthenticated attacker can exploit this weakness to spoof the user interface or execute ...