6647 matches found
CVE-2024-30180
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Easy Social Feed allows Stored XSS.This issue affects Easy Social Feed: from n/a through 6.5.3...
CVE-2024-30178
Technical details for CVE-2024-30178 are not publicly available in the provided documents. Monitor for updates from vendors/security advisories to obtain affected product/version, impact, and fixes.
CVE-2024-29934
CVE-2024-29934 is an XSS vulnerability in Piotnet Addons For Elementor. Connected sources confirm a Stored XSS condition during web page generation affecting Piotnet Addons For Elementor up to version 2.4.25 (range: n/a through 2.4.25). The vulnerability is triggered through input handling in the...
CVE-2024-29923
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PropertyHive allows Reflected XSS.This issue affects PropertyHive: from n/a through 2.0.8...
CVE-2024-30197
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through = 4.0.26...
CVE-2024-30197
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Andy Moyle Church Admin allows Stored XSS.This issue affects Church Admin: from n/a through 4.0.26...
CVE-2024-29906
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter MDTF allows Stored XSS.This issue affects WordPress Meta Data and Taxonomies Filter MDTF: from n/a through 1.3.2...
PT-2024-23134 · Unknown · Icalendrier
Name of the Vulnerable Software and Affected Versions: iCalendrier versions 1.80 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For versions 1.80...
PT-2024-23014 · Unknown · Mybooktable Bookstore
Name of the Vulnerable Software and Affected Versions: MyBookTable Bookstore versions 3.3.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject...
PT-2024-23140 · Unknown · Survey Maker
Name of the Vulnerable Software and Affected Versions: Survey Maker versions n/a through 4.0.6 Description: The issue affects Survey Maker, allowing Reflected XSS due to improper neutralization of input during web page generation. This can lead to cross-site scripting attacks. Recommendations: Fo...
PT-2024-23031 · Unknown · Podlove Web Player
Name of the Vulnerable Software and Affected Versions: Podlove Web Player versions through 5.7.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. Recommendations: For versions through 5.7.1,...
PT-2024-23035 · Mad Fish Digital · Mad Fish Digital Bulk Noindex & Nofollow Toolkit
Name of the Vulnerable Software and Affected Versions: Mad Fish Digital Bulk NoIndex & NoFollow Toolkit versions through 2.01 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS...
PT-2024-23229 · Unknown · Bold Page Builder
Name of the Vulnerable Software and Affected Versions: Bold Page Builder versions through 4.7.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...
PT-2024-23034 · WordPress · Squirrly Seo Plugin
Name of the Vulnerable Software and Affected Versions: Squirrly SEO Plugin versions through 12.3.16 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For versions through...
PT-2024-23149
Name of the Vulnerable Software and Affected Versions HasThemes WC Builder versions 1.0.18 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inje...
PT-2024-23244 · Appscreo · Easy Social Share Buttons
Name of the Vulnerable Software and Affected Versions: Appscreo Easy Social Share Buttons versions n/a through 9.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...
PT-2024-21723 · Cloudways · Cloudways Breeze
Name of the Vulnerable Software and Affected Versions: Cloudways Breeze versions through 2.1.3 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means an attacker could inject malicious scripts into the website,...
PT-2024-23241
Name of the Vulnerable Software and Affected Versions Andy Moyle Church Admin versions 4.1.17 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means an attacker can inject malicious...
PT-2024-23250
Name of the Vulnerable Software and Affected Versions Xylus Themes WordPress Importer versions 1.0.0 through 1.0.4 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS attacks...
VulnCheck KEV: CVE-2024-29931
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPGMaps WP Go Maps wp-google-maps.This issue affects WP Go Maps: from n/a through = 9.0.29...