CVE-2024-2166

CVE-2024-2166 affects Forcepoint Email Security (Real Time Monitor modules). Root cause: improper neutralization of input during web page generation, leading to a reflected cross-site scripting (XSS) vulnerability. Affected product version: Email Security prior to 8.5.5 HF003. CVSS details from N...

CVE-2024-7077

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Semtek Informatics Software Consulting Inc. Semtek Sempos allows Reflected XSS.This issue affects Semtek Sempos: through 31072024...

Semtek Sempos 跨站脚本漏洞

Semtek Sempos is an application from Semtek, Inc. A cross-site scripting vulnerability exists in Semtek Sempos 31072024 and prior versions that stems from improper input neutralization during web page generation, resulting in a reflected cross-site scripting vulnerability...

PT-2024-10355 · Unknown · Open Social

Name of the Vulnerable Software and Affected Versions: Open Social versions 0.0.0 through 12.3.8 Open Social versions 12.4.0 through 12.4.5 Open Social versions 13.0.0 through 13.0.0-alpha11 Description: The issue is related to improper neutralization of input during web page generation, allowing...

CVE-2024-38858

Improper neutralization of input in Checkmk before version 2.3.0p14 allows attackers to inject and run malicious scripts in the Robotmk logs view...

UBUNTU-CVE-2024-38858

Improper neutralization of input in Checkmk before version 2.3.0p14 allows attackers to inject and run malicious scripts in the Robotmk logs view...

NAC Telecommunication NACPremium 跨站脚本漏洞

NAC Telecommunication NACPremium is an application from NAC Telecommunication, Inc. A cross-site scripting vulnerability exists in NAC Telecommunication NACPremium 01082024 and prior versions, which stems from improper input neutralization during web page generation, resulting in vulnerability to...

CVE-2024-43920

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Jegstudio Gutenverse allows Stored XSS.This issue affects Gutenverse: from n/a through 1.9.4...

CVE-2024-43963

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WaspThemes YellowPencil Visual CSS Style Editor allows Reflected XSS.This issue affects YellowPencil Visual CSS Style Editor: from n/a through 7.6.1...

CVE-2024-43964

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Michael Leithold DSGVO All in one for WP allows Stored XSS.This issue affects DSGVO All in one for WP: from n/a through 4.5...

CVE-2024-43961

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in azurecurve azurecurve Toggle Show/Hide allows Stored XSS.This issue affects azurecurve Toggle Show/Hide: from n/a through 2.1.3...

CVE-2024-43951

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CryoutCreations Tempera allows Stored XSS.This issue affects Tempera: from n/a through 1.8.2...

CVE-2024-43958

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Gianni Porto IntoTheDark allows Reflected XSS.This issue affects IntoTheDark: from n/a through 1.0.5...

CVE-2024-43936

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPDeveloper EmbedPress allows Stored XSS.This issue affects EmbedPress: from n/a through 4.0.8...

CVE-2024-43920

CVE-2024-43920 (Jegstudio Gutenverse) is a Stored XSS in Gutenverse (Authenticated via Contributor+) affecting Gutenverse releases up to 1.9.4. The issue arises from improper neutralization of user input during web page generation, enabling attacker-supplied content to execute in a victim’s brows...

CVE-2024-43934

CVE-2024-43934 affects the Collapsing Archives WordPress plugin. It is a Stored XSS caused by improper neutralization of input during web page generation, affecting versions up to 3.0.5 (n/a to 3.0.5). Remediation: update to the patched version 3.0.5.

CVE-2024-43935 WordPress WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) plugin <= 1.6.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WP Delicious Delicious Recipes – WordPress Recipe Plugin allows Stored XSS.This issue affects Delicious Recipes – WordPress Recipe Plugin: from n/a through 1.6.7...

CVE-2024-43950

CVE-2024-43950 affects the Brickscore WordPress plugin. It reports stored XSS due to improper input neutralization during web page generation, with Brickscore versions n/a through 1.4.2.5 affected. The vulnerability is currently listed as Unpatched by the sources in the Connected documents; no pu...

CVE-2024-43951

CVE-2024-43951 describes a Stored Cross-Site Scripting (XSS) flaw in CryoutCreations Tempera (WordPress theme). Affected versions are Tempera from n/a through 1.8.2. The vulnerability is due to improper neutralization of user input during web page generation, enabling stored XSS. Public reference...

CVE-2024-43952

CVE-2024-43952 is a Stored XSS in CryoutCreations Esotera theme (WordPress), affecting Esotera versions up to 1.2.5.1. Root cause: improper input neutralization during web page generation. Wordfence notes patching status; remediation is to update to a patched release. No exploitation details are ...