CVE-2024-49241

CVE-2024-49241 concerns the WordPress Tito plugin (versions

PT-2024-33360 · Unknown · Mahesh Patel Mitm Bug Tracker

Name of the Vulnerable Software and Affected Versions: Mahesh Patel Mitm Bug Tracker versions n/a through 1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: F...

WordPress plugin El mejor Cluster 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin WordPress Video 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin WordPress...

WordPress plugin MAS Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-33371 · Unknown · Plexx Elementor Extension

Name of the Vulnerable Software and Affected Versions: Plexx Elementor Extension versions 1.3.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations...

CVE-2024-49283

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VillaTheme CURCY woo-multi-currency allows Reflected XSS.This issue affects CURCY: from n/a through = 2.2.3...

CVE-2024-49262 WordPress Country Flags for Elementor plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in wepic Country Flags for Elementor allows Stored XSS.This issue affects Country Flags for Elementor: from n/a through 1.0.1...

CVE-2024-49262

CVE-2024-49262 affects the WordPress plugin Country Flags for Elementor (versions up to 1.0.1). The issue is an Stored XSS vulnerability caused by improper neutralization of input during web page generation, enabling an attacker to inject scripts that persist in pages served to users. Public sour...

CVE-2024-49263

CVE-2024-49263 affects the WordPress plugin My Favorites (versions n/a through 1.4.1). The issue is a stored XSS vulnerability caused by improper neutralization of user input during web page generation, allowing an attacker to inject malicious scripts that persist in the site and may execute when...

CVE-2024-49278

CVE-2024-49278 is a stored XSS vulnerability in the WordPress plugin Omnipress (Omnipress Omnipress) up to version 1.4.3, caused by improper neutralization of input during web page generation. The CVE entry notes that affected software ranges include &lt;= 1.4.3, but no public remediation version...

CVE-2024-49278 WordPress Omnipress plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in omnipressteam Omnipress allows Stored XSS.This issue affects Omnipress: from n/a through 1.4.3...

CVE-2024-49316

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zodiac Akismet htaccess writer akismet-htaccess-writer allows Reflected XSS.This issue affects Akismet htaccess writer: from n/a through = 1.0.1...

CVE-2024-49282

CVE-2024-49282 concerns the WordPress plugin “Responsive Lightbox & Gallery” (dFactory Responsive Lightbox) and is a Cross-Site Scripting (Stored XSS) vulnerability in the plugin’s input handling during web page generation, affecting versions up to 2.4.8. The root cause, as reported, is improper ...

CVE-2024-49296

CVE-2024-49296 is a stored XSS vulnerability in the WordPress plugin “Custom Add to Cart Button Label and Link” (affected: versions up to 1.6.1). The issue arises from improper neutralization of input during web page generation, enabling stored cross-site scripting. Public exploit details are not...

CVE-2024-43997

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in easy.Jobs EasyJobs allows Reflected XSS.This issue affects EasyJobs: from n/a through 2.4.14...

CVE-2024-48022

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in SysBasics Shortcode For Elementor Templates allows Stored XSS.This issue affects Shortcode For Elementor Templates: from n/a through 1.0.0...

CVE-2024-48025

CVE-2024-48025 is a stored Cross-Site Scripting vulnerability in the WordPress plugin Simple Baseball Scoreboard (versions

CVE-2024-49320 WordPress Encyclopedia / Glossary / Wiki plugin <= 1.7.60 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dennis Encyclopedia / Glossary / Wiki encyclopedia-lexicon-glossary-wiki-dictionary allows Reflected XSS.This issue affects Encyclopedia / Glossary / Wiki: from n/a through = 1.7.60...

WordPress plugin Themesflat Addons For Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...