CVE-2024-53763

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rejuan Ahamed Best Addons for Elementor allows Stored XSS.This issue affects Best Addons for Elementor: from n/a through 1.0.5...

WordPress plugin Vertical Carousel 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

PT-2024-35868 · Terry Lin · Wp Mathjax

Name of the Vulnerable Software and Affected Versions: Terry Lin WP MathJax versions 1.0.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Stored Cross-Site Scripting XSS vulnerability. This allows for Stored XSS...

WordPress plugin Znajdz Prace z Praca.Pl 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

PT-2024-35885 · Praca.Pl Sp. Z O.O. · Praca.Pl

Name of the Vulnerable Software and Affected Versions: Praca.Pl sp. Z o.O. Znajdź Pracę z Praca.Pl versions n/a through 2.2.3 Description: The issue affects Praca.Pl sp. Z o.O. Znajdź Pracę z Praca.Pl, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This...

WordPress plugin Devnex Addons For Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress plugin WP MathJax 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site...

Cross-Site Scripting (XSS)

librenms/librenms is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper handling of user input in the "overwriteip" parameter, allowing untrusted data JavaScript code to be stored and executed in the application without proper validation or escaping...

WordPress plugin Fence URL 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site...

WordPress plugin WP Mailster 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site...

PT-2024-38930 · Siempelkamp · Umweltoffice

Name of the Vulnerable Software and Affected Versions: Web Application affected versions not specified Description: A low privileged remote attacker can insert a SQL injection in the web application due to improper handling of HTTP request input data, which allows the exfiltration of all data. Th...

PT-2024-35840 · Unknown · Fintelligence Calculator

Name of the Vulnerable Software and Affected Versions: Fintelligence Calculator versions 1.0.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS. This occurs when the web pa...

USN-7117-2 needrestart regression

USN-7117-1 fixed vulnerabilities in needrestart. The update introduced a regression in needrestart. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Qualys discovered that needrestart passed unsanitized data to a library libmodule-scandeps-perl which...

PT-2024-8874

Name of the Vulnerable Software and Affected Versions: Copilot Studio affected versions not specified Description: The issue is related to the improper neutralization of input during web page generation, also known as 'Cross-site Scripting', in Copilot Studio. This can allow an unauthorized...

ALPINE-CVE-2024-7882

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Special Minds Design and Software e-Commerce allows SQL Injection. This issue affects e-Commerce: before 22.11.2024...

PT-2024-38616

Name of the Vulnerable Software and Affected Versions Firmanet Software ERP versions prior to 22.11.2024 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. The vendor...

KION Exchange Programs Software 跨站脚本漏洞

KION Exchange Programs Software is a program exchange software from KION. A cross-site scripting vulnerability exists in KION Exchange Programs Software versions 21.11.2024 and earlier, which stems from reflective cross-site scripting due to improper input neutralization...

Smarttek Informatics Smart Doctor 跨站脚本漏洞

Smarttek Informatics Smart Doctor is an intelligent medical software from Smarttek Informatics, Inc. A cross-site scripting vulnerability exists in Smarttek Informatics Smart Doctor version 21.11.2024 and earlier, which stems from improper input neutralization during web page generation and is...

LLaMA-Factory 操作系统命令注入漏洞

LLaMA-Factory is a fine-tuned large-scale language model by a Chinese hoshi-hiyouga individual developer. A cross-site scripting vulnerability exists in LLaMA-Factory version 0.9.0 and earlier, which stems from improper handling of user input and allows malicious actors to execute arbitrary...

PT-2024-16963

Name of the Vulnerable Software and Affected Versions django CMS versions prior to 4.0 Description The issue is related to improper neutralization of input during web page generation, leading to a Cross-site Scripting XSS vulnerability. This allows for stored XSS attacks. The estimated number of...