CVE-2024-49651

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matt Royal WooCommerce Maintenance Mode woocommerce-maintenance-mode allows Reflected XSS.This issue affects WooCommerce Maintenance Mode: from n/a through = 2.0.1...

CVE-2024-49651

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Matt Royal WooCommerce Maintenance Mode allows Reflected XSS.This issue affects WooCommerce Maintenance Mode: from n/a through 2.0.1...

CVE-2024-49646

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ioannup Code Generate code-generator allows Reflected XSS.This issue affects Code Generate: from n/a through = 1.0...

CVE-2024-49646

CVE-2024-49646 affects the WordPress plugin Code Generate (<= 1.0). The vulnerability is a Reflected XSS caused by improper input neutralization during web page generation, enabling an attacker to inject script via unauthenticated input. The CVSSv3.1 base score is 7.1 (HIGH) with NETWORK attac...

CVE-2024-49647

CVE-2024-49647 : Reflected XSS in WordPress plugin Simple Custom Admin (

CVE-2024-49651 WordPress WooCommerce Maintenance Mode plugin <= 2.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matt Royal WooCommerce Maintenance Mode woocommerce-maintenance-mode allows Reflected XSS.This issue affects WooCommerce Maintenance Mode: from n/a through = 2.0.1...

CVE-2024-49659

CVE-2024-49659 affects the WordPress Coub plugin (versions

CVE-2024-49662

CVE-2024-49662 is a report of a Reflected XSS in the WordPress plugin Simple Load More (also listed as Webgensis Simple Load More), affecting versions

CVE-2024-50407

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bob Namaste! LMS namaste-lms allows Reflected XSS.This issue affects Namaste! LMS: from n/a through = 2.6.2...

CVE-2024-49667

CVE-2024-49667 is a stored XSS vulnerability in Local Business Addons For Elementor (NervyThemes) affecting versions up to 1.1.5 (also referred to as Local Business Addons For Elementor, formerly Waze Map). The issue arises from improper input neutralization during web page generation, allowing s...

CVE-2024-49678

CVE-2024-49678 is a reflected XSS in WordPress theme/plugin Js Paper (versions

CVE-2024-50418

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Time Slot Booking Time Slot timeslot allows DOM-Based XSS.This issue affects Time Slot: from n/a through = 1.3.6...

CVE-2024-50415

CVE-2024-50415 corresponds to a stored cross-site scripting (XSS) vulnerability in the WordPress plugin Ads.txt & App-ads.txt Manager for WordPress . The issue arises from improper input neutralization during web page generation, allowing stored XSS for versions up to and including 1.1.7.1. The v...

WordPress plugin BuddyPress Greeting Message 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

WordPress plugin Time Slot 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Risk Warning Bar 跨站脚本漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

PT-2024-33595

Name of the Vulnerable Software and Affected Versions Tida URL Screenshot versions n/a through 1.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks. Recommendations For...

WordPress plugin SVG Captcha 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

WordPress plugin Namaste! LMS 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-33587

Name of the Vulnerable Software and Affected Versions Coral Web Design CWD 3D Image Gallery versions 1.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks...