CVE-2024-33639

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AccessAlly PopupAlly allows Stored XSS.This issue affects PopupAlly: from n/a through 2.1.1...

CVE-2024-33639

CVE-2024-33639 affects AccessAlly PopupAlly for WordPress, enabling Stored XSS via improper neutralization of input during web page generation. Affected: PopupAlly up to version 2.1.1. Root cause aligned with input handling in page generation; remediation details are not provided in the connected...

PT-2024-25451 · Themencode · Fan Page Widget

Name of the Vulnerable Software and Affected Versions: Fan Page Widget by ThemeNcode versions n/a through 2.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject...

WordPress plugin Advanced Post List 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

WordPress plugin Meks ThemeForest Smart Widget 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin Me...

WordPress plugin Fan Page Widget by ThemeNcode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin Fan Pag...

WordPress plugin PopupAlly 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

USN-6751-1 zabbix vulnerabilities

It was discovered that Zabbix incorrectly handled input data in the discovery and graphs pages. A remote authenticated attacker could possibly use this issue to perform reflected cross-site scripting XSS attacks. CVE-2022-35229, CVE-2022-35230...

CVE-2024-32961

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in creativethemeshq Blocksy blocksy.This issue affects Blocksy: from n/a through = 2.0.33...

CVE-2024-32961

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative Themes HQ Blocksy allows Stored XSS.This issue affects Blocksy: from n/a through 2.0.33...

WordPress theme UDesign 跨站脚本漏洞

WordPress is a blogging platform developed in PHP by the WordPress Foundation. The platform supports personal blog sites on PHP and MySQL servers.WordPress theme is a theme for WordPress. A cross-site scripting vulnerability exists in WordPress theme UDesign version 4.7.3 and prior versions, whic...

PT-2024-24810 · Unknown · Coupon & Discount Code Reveal Button

Name of the Vulnerable Software and Affected Versions: Coupon & Discount Code Reveal Button versions 1.2.5 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Stored XSS vulnerability. This allows for the storage of...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to escalate their privileges or execute arbitrary code.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to increase their privileges or execute arbitrary code by moving the log files NT AUTHORITY\SYSTEM to...

PT-2024-12075 · Xtemos · Xtemos Woodmart

Name of the Vulnerable Software and Affected Versions: xtemos WoodMart versions n/a through 7.0.4 Description: The issue affects the xtemos WoodMart, allowing for Cross-Site Scripting XSS due to improper authentication and neutralization of input during web page generation. Recommendations: For...

WordPress plugin Schema & Structured Data for WP & AMP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Cross-Site Scripting

github.com/baidu/openrasp is vulnerable to Cross-Site Scripting. The vulnerability is due to improper handling of input and lack of output sanitization in the redirect parameter on the /login page. This allows attacker to inject arbritrary javascript to be executed with the permissions of a user...

VulnCheck KEV: CVE-2024-32711

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in myCred allows Stored XSS.This issue affects myCred: from n/a through 2.6.3...

PT-2024-3190 · Apache · Apache Answer

Name of the Vulnerable Software and Affected Versions: Apache Answer versions prior to 1.3.0 Description: The issue is related to improper neutralization of input during web page generation, which can lead to cross-site scripting XSS attacks. A logged-in user can input malicious code in their...

CVE-2024-32576

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Booking Algorithms BA Book Everything allows Stored XSS.This issue affects BA Book Everything: from n/a through 1.6.8...

CVE-2024-32575

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kraftplugins Mega Elements allows Stored XSS.This issue affects Mega Elements: from n/a through 1.1.9...