PT-2024-27409 · Unknown · Jethin Gallery Slideshow

Name of the Vulnerable Software and Affected Versions: Jethin Gallery Slideshow versions 1.4.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations:...

PT-2024-27317 · Unknown · Biplob018 Shortcode Addons

Name of the Vulnerable Software and Affected Versions: biplob018 Shortcode Addons versions 3.2.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendation...

PT-2024-27407 · Beaver Builder · Ninja Beaver Add-Ons

Name of the Vulnerable Software and Affected Versions: Ninja Beaver Add-ons for Beaver Builder versions through 2.4.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...

PT-2024-27374 · Unknown · Theme4Press Demo Awesome

Name of the Vulnerable Software and Affected Versions: Theme4Press Demo Awesome versions 1.0.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For...

PT-2024-27421 · Unknown · Permalink Manager Lite

Name of the Vulnerable Software and Affected Versions: Permalink Manager Lite versions 2.4.3.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For...

PT-2024-27316 · Unknown · Biplob Adhikari Tabs

Name of the Vulnerable Software and Affected Versions: Biplob Adhikari Tabs versions n/a through 4.0.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For...

PT-2024-27544 · Widgetkit · Widgetkit

Name of the Vulnerable Software and Affected Versions: WidgetKit versions n/a through 2.5.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For versions n...

CVE-2024-37461

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Martin Gibson IdeaPush allows Stored XSS.This issue affects IdeaPush: from n/a through 8.65...

CVE-2024-37459

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PayPlus LTD PayPlus Payment Gateway allows Reflected XSS.This issue affects PayPlus Payment Gateway: from n/a through 6.6.8...

CVE-2024-37509

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Maksekeskus AS MakeCommerce for WooCommerce allows Reflected XSS.This issue affects MakeCommerce for WooCommerce: from n/a through 3.5.1...

CVE-2024-37515

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Optemiz XPlainer - WooCommerce Product FAQ allows Reflected XSS.This issue affects XPlainer - WooCommerce Product FAQ: from n/a through 1.6.3...

CVE-2024-37492

CVE-2024-37492 affects the WordPress Gutenberg plugin (versions through 18.6.0). The vulnerability is an Improper Neutralization of Input During Web Page Generation (XSS) that yields a stored XSS condition in Gutenberg outputs. Root cause is input handling in the plugin’s page generation code. Im...

CVE-2024-37559

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Echenley Counterpoint allows Reflected XSS.This issue affects Counterpoint: from n/a through 1.8.1...

CVE-2024-37551

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Perials Simple Social Share allows Stored XSS.This issue affects Simple Social Share: from n/a through 3.0...

CVE-2024-37549

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Pdfcrowd Save as PDF plugin by Pdfcrowd allows Stored XSS.This issue affects Save as PDF plugin by Pdfcrowd: from n/a through 4.0.0...

CVE-2024-37545

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Nick Halsey Floating Social Media Links allows Stored XSS.This issue affects Floating Social Media Links: from n/a through 1.5.2...

PT-2024-27597 · Helloasso · Helloasso

Name of the Vulnerable Software and Affected Versions: HelloAsso versions 1.1.9 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For versions...

CVE-2024-37954

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in marcelotorres Simple Responsive Slider allows Reflected XSS.This issue affects Simple Responsive Slider: from n/a through 0.2.2.5...

CVE-2024-37936

CVE-2024-37936 describes a Stored XSS in Tabs For WPBakery Page Builder (WordPress) due to improper input neutralization during web page generation. Affected: Tabs For WPBakery Page Builder versions n/a through 1.2 (plugin name: Tabs For WPBakery Page Builder, formerly Visual Composer). Impact is...

CVE-2024-37953

CVE-2024-37953 is a Reflected XSS in the MBE eShip WordPress plugin (MBE eShip) caused by improper neutralization of input during web page generation. Affected versions are up to and including 2.1.2. The vulnerability is publicly documented by Red Hat and other sources, which also advise upgradin...