ROS-20240514-15

The vulnerability of the file includes/specials/SpecialMovePage.php of the software tool for implementing the MediaWiki hypertext environment is related to incorrect cleanup or release of resources. MediaWiki hypertext environment is related to incorrect resource clearing or freeing. Exploitation...

ROS-20240514-06

The vulnerability of the file includes/specials/SpecialMovePage.php of the software tool for implementing the MediaWiki hypertext environment is related to incorrect resource clearing or freeing. Exploitation The vulnerability could allow an attacker acting remotely to cause a denial of service...

ROS-20240514-12

The vulnerability of the file includes/specials/SpecialMovePage.php of the software tool for implementing the MediaWiki hypertext environment is related to incorrect resource clearing or freeing. Exploitation The vulnerability could allow an attacker acting remotely to cause a denial of service...

ROS-20240514-09

The vulnerability of the file includes/specials/SpecialMovePage.php of the software tool for implementing the MediaWiki hypertext environment is related to incorrect resource clearing or freeing. Exploitation The vulnerability could allow an attacker acting remotely to cause a denial of service...

CVE-2024-34419

CVE-2024-34419: Stored XSS in the WordPress plugin Configure Login Timeout (Nathan Vonnahme). The issue is triggered by improper input neutralization during web-page generation, affecting Configure Login Timeout versions up to 1.0 (no details on patch/version beyond 1.0). Attacker requires high p...

CVE-2024-34424

The CVE-2024-34424 entry describes an Stored XSS in the iePlexus Featured Content Gallery for WordPress (plugin) 31ct; root cause is improper input neutralization during web page generation, affecting Featured Content Gallery versions from n/a through 3.2.0. Public details in connected Red Hat a...

CVE-2024-34429

CVE-2024-34429 describes a stored XSS in the Corona Virus (COVID-19) Banner & Live Data WordPress plugin. The vulnerability arises from improper neutralization of input during web page generation, enabling attacker-supplied content to be stored and later rendered in pages. Affected software is Co...

CVE-2024-34430

CVE-2024-34430 concerns the TT Custom Post Type Creator WordPress plugin (

CVE-2024-34553

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Select-Themes Stockholm Core allows Reflected XSS.This issue affects Stockholm Core: from n/a through 2.4.1...

CVE-2024-34569

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Katie Zotpress zotpress.This issue affects Zotpress: from n/a through = 7.3.9...

CVE-2024-34570

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xpro Xpro Elementor Addons allows Stored XSS.This issue affects Xpro Elementor Addons: from n/a through 1.4.3...

PT-2024-25960 · Unknown · Habibcoder Sticky Social Link

Name of the Vulnerable Software and Affected Versions: HabibCoder Sticky Social Link versions n/a through 1.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means that an...

PT-2024-25990 · Unknown · Wpsoul Table Maker

Name of the Vulnerable Software and Affected Versions: Wpsoul Table Maker versions 1.9.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject malicious...

PT-2024-25980 · Unknown · Debug Info

Name of the Vulnerable Software and Affected Versions: Debug Info versions through 1.3.10 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means that an attacker can inject malicio...

CVE-2024-34380

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuantumCloud Conversational Forms for ChatBot allows Stored XSS.This issue affects Conversational Forms for ChatBot: from n/a through 1.2.0...

CVE-2024-34374

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuomodoSoft ElementsReady Addons for Elementor allows Stored XSS.This issue affects ElementsReady Addons for Elementor: from n/a through 5.8.0...

CVE-2024-32831

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Lorna Timbah webgrrrl Accessibility Widget allows Stored XSS.This issue affects Accessibility Widget: from n/a through 2.2...

CVE-2024-33940

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ashan Jay EventON allows Stored XSS.This issue affects EventON: from n/a through 2.2.14...

CVE-2024-33932

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vinod Dalvi Login Logout Register Menu allows Stored XSS.This issue affects Login Logout Register Menu: from n/a through 2.0...

CVE-2024-33946 WordPress WPify Woo Czech plugin <= 4.0.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPify s.R.O. WPify Woo Czech allows Reflected XSS.This issue affects WPify Woo Czech: from n/a through 4.0.10...