MOXA OnCell G3470A-LTE Command Injection Vulnerability

MOXA OnCell G3470A-LTE is a series of cellular gateway/router from MOXA China. A command injection vulnerability exists in MOXA OnCell G3470A-LTE v1.7.7 and earlier firmware versions, which stems from the lack of a neutralization input in the Web Key Upload function, and can be exploited by an...

BIT-WORDPRESS-MULTISITE-2024-31111 WordPress Core < 6.5.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Automattic WordPress allows Stored XSS.This issue affects WordPress: from 6.5 through 6.5.4, from 6.4 through 6.4.4, from 6.3 through 6.3.4, from 6.2 through 6.2.5, from 6.1 through 6.1.6,...

CVE-2024-37248

CVE-2024-37248 (Anima theme, CryoutCreations) stores user-supplied input via the Anima theme’s web-page generation process, leading to a Stored Cross-Site Scripting (XSS) condition. Affected software: CryoutCreations Anima, version range from n/a through 1.4.1. Public data lists the vulnerability...

UBUNTU-CVE-2024-31111

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Automattic WordPress allows Stored XSS.This issue affects WordPress: from 6.5 through 6.5.4, from 6.4 through 6.4.4, from 6.3 through 6.3.4, from 6.2 through 6.2.5, from 6.1 through 6.1.6,...

WordPress Cross-Site Scripting Vulnerability

WordPress is a suite of blogging platforms developed in the PHP language by the WordPress Foundation. The platform supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress that stems from improper input neutralization during page generation...

CVE-2024-35766

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ollybach WPPizza allows Reflected XSS.This issue affects WPPizza: from n/a through 3.18.13...

CVE-2024-35761

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in vCita Online Booking & Scheduling Calendar for WordPress by vcita allows Stored XSS.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through 4.4.0...

CVE-2024-35764

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through = 4.4.4...

CVE-2024-35758

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Theme Horse Interface allows Stored XSS.This issue affects Interface: from n/a through 3.1.0...

CVE-2024-35762

CVE-2024-35762 is a Stored Cross-Site Scripting issue in Cryout Creations Serious Slider for WordPress, affecting Serious Slider 1.2.4 and earlier. Root cause: improper neutralization of input during web page generation. Impact: stored XSS could enable an attacker with Editor access to inject scr...

PT-2024-4285 · Moxa · Oncell G3470A-Lte Series

Name of the Vulnerable Software and Affected Versions: OnCell G3470A-LTE Series firmware versions v1.7.7 and prior Description: The issue is related to a lack of neutralized inputs in the web key upload function, allowing an attacker to modify intended commands sent to target functions. This coul...

CVE-2024-6179

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSign CMS: from 4.1.3 before 4.3.1...

CVE-2024-6179

LG SuperSign CMS is affected by a Reflected XSS due to improper input neutralization during web page generation. Affected versions are 4.1.3 up to 4.3.0 (before 4.3.1). Root cause: insufficient input neutralization in the page generation flow. Remediation: upgrade to 4.3.1 or later as indicated b...

CVE-2024-6178 XSS vulnerability in LG SuperSign CMS

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSign CMS: from 4.1.3 before 4.3.1...

CVE-2024-6177 XSS vulnerability in LG SuperSign CMS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSign CMS: from 4.1.3 before 4.3.1...

LG SuperSign CMS Cross-Site Scripting Vulnerability

LG SuperSign CMS is a content management software solution optimized for LG webOS kanbanban from Luckin LG Korea. A cross-site scripting vulnerability exists in LG SuperSign CMS versions 4.1.3 through 4.3.1, which stems from improper input neutralization during web page generation, resulting in...

LG SuperSign CMS Cross-Site Scripting Vulnerability

LG SuperSign CMS is a content management software solution optimized for LG webOS kanbanban from Luckin LG Korea. A cross-site scripting vulnerability exists in LG SuperSign CMS versions prior to 4.1.3 through 4.3.1, which stems from the presence of improper input neutralization during web page...

PT-2024-37436

Name of the Vulnerable Software and Affected Versions: LG Electronics SuperSign CMS versions 4.1.3 through 4.3.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This is a Reflected XSS vulnerability...

CVE-2024-5961

CVE-2024-5961 affects 2ClickPortal software versions 7.2.31–7.6.4. Root cause: improper neutralization of input during web page generation, leading to reflected cross-site scripting (XSS). Impact: script execution in a user’s browser when they are tricked into visiting a crafted URL. No remediati...

CVE-2024-35675

CVE-2024-35675 is a vulnerability in the WordPress plugin Advanced Woo Labels – Product Labels for WooCommerce . Connected sources describe it as an authenticated (Contributor+) Stored Cross-Site Scripting (XSS) vulnerability affecting the plugin version range up to and including 1.93. The root c...