PT-2024-23477 · Unknown · Underconstruction

Name of the Vulnerable Software and Affected Versions: underConstruction versions n/a through 1.21 Description: The issue is related to improper neutralization of input during web page generation, also known as cross-site scripting. This allows for stored XSS attacks. Recommendations: For version...

PT-2024-23791 · Unknown · User Rights Access Manager

Name of the Vulnerable Software and Affected Versions: User Rights Access Manager versions 1.1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS attacks. Recommendations...

PT-2024-23782 · Unknown · Convert Post Types

Name of the Vulnerable Software and Affected Versions: Convert Post Types versions 1.4 and earlier Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting XSS, specifically Reflected XSS. Recommendations: For Convert...

PT-2024-23792 · Webdorado · Webdorado Spiderfaq

Name of the Vulnerable Software and Affected Versions: WebDorado SpiderFAQ versions 1.3.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. This allows for Reflected XSS attacks...

CVE-2024-30519

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Lordicon Lordicon Animated Icons allows Stored XSS.This issue affects Lordicon Animated Icons: from n/a through 2.0.1...

CVE-2024-30483

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Simple Sponsorships Sponsors allows Stored XSS.This issue affects Sponsors: from n/a through 3.5.1...

Algoritimk E-commerce Software 跨站脚本漏洞

Algoritimk E-commerce Software is an e-commerce platform software from Algoritimk. A cross-site scripting vulnerability exists in Algoritimk E-commerce Software versions prior to 3.9.2, which stems from improper neutralization of user input...

PT-2024-23377 · Unknown · Booking Activities

Name of the Vulnerable Software and Affected Versions: Booking Activities versions 1.15.19 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can...

PT-2024-23371 · Unknown · Testimonial Slider

Name of the Vulnerable Software and Affected Versions: GS Testimonial Slider versions 3.1.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

Egehan Security WebPDKS SQL注入漏洞

Egehan Security WebPDKS is an application from Egehan Security. Egehan Security WebPDKS suffers from a SQL injection vulnerability that stems from improper neutralization of the particular element used...

PT-2024-23353 · Unknown · Hash Elements

Name of the Vulnerable Software and Affected Versions: Hash Elements versions 1.3.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject malicious...

PT-2024-7747 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability, where the...

VulnCheck KEV: CVE-2024-30503

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EverPress Mailster mailster.This issue affects Mailster: from n/a through = 4.0.6...

WordPress Plugin Zoho Campaigns SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Zoho Campaigns suffers fro...

NEC Aterm 安全漏洞

NEC Aterm is a series of wireless routers from Japan Electric NEC. A security vulnerability exists in NEC Aterm that stems from improper neutralization of specific elements used. The following products are affected: WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP,...

CVE-2024-29812

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ReviewX allows Stored XSS.This issue affects ReviewX: from n/a through 1.6.22...

CVE-2024-29805

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ShopUp Shipping with Venipak for WooCommerce allows Reflected XSS.This issue affects Shipping with Venipak for WooCommerce: from n/a through 1.19.5...

CVE-2024-29793

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MailMunch MailChimp Forms by MailMunch allows Stored XSS.This issue affects MailChimp Forms by MailMunch: from n/a through 3.2.2...

CVE-2024-29774

CVE-2024-29774 is a Reflected XSS in WP Directory Kit (WPDirectoryKit) due to Improper Neutralization of Input During Web Page Generation. Affected: WPDirectoryKit versions from n/a through 1.2.9. Root cause, impact, and remediation details are present in connected sources (Red Hat and ENISA entr...

CVE-2024-29794

CVE-2024-29794 affects Conversios.Io (WordPress plugin) with an improper neutralization of input during web page generation, enabling reflected XSS. Affected versions are from n/a through 6.9.1. No patch/version remediation details are provided in the supplied documents; exploitation status is no...