6431 matches found
CVE-2024-32578 WordPress Sliderby10Web plugin <= 1.2.54 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 10Web Slider by 10Web allows Reflected XSS.This issue affects Slider by 10Web: from n/a through 1.2.54...
CVE-2024-32592
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VoidCoders, innovs Void Elementor WHMCS Elements For Elementor Page Builder allows Stored XSS.This issue affects Void Elementor WHMCS Elements For Elementor Page Builder: from n/a through 2.0...
CVE-2024-32591
CVE-2024-32591 affects the WordPress Backend Designer plugin. The issue is a Stored XSS in Backend Designer when generating web pages, with affected versions listed as from n/a through 1.3. The description confirms the root cause as improper handling of input during web page generation, enabling ...
CVE-2024-32592 WordPress Void Elementor WHMCS Elements For Elementor Page Builder plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VoidCoders, innovs Void Elementor WHMCS Elements For Elementor Page Builder allows Stored XSS.This issue affects Void Elementor WHMCS Elements For Elementor Page Builder: from n/a through 2.0...
PT-2024-24716 · Unknown · Attesa Extra
Name of the Vulnerable Software and Affected Versions: Attesa Extra versions 1.3.9 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...
PT-2024-24704 · Unknown · Bowo Debug Log Manager
Name of the Vulnerable Software and Affected Versions: Bowo Debug Log Manager versions through 2.3.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means an attacker can inject malicious scripts into the website,...
PT-2024-24675 · Knight · Knight Lab Timeline
Name of the Vulnerable Software and Affected Versions: Knight Lab Timeline versions 3.9.3.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For...
PT-2024-24708
Name of the Vulnerable Software and Affected Versions Munir Kamal Gutenberg Block Editor Toolkit versions 1.40.4 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...
CVE-2024-32510
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Loopus WP Cost Estimation & Payment Forms Builder allows Reflected XSS.This issue affects WP Cost Estimation & Payment Forms Builder: from n/a through 10.1.75...
CVE-2024-32526
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Flector Easy Textillate allows Stored XSS.This issue affects Easy Textillate: from n/a through 2.02...
CVE-2024-32505
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Roxnor ElementsKit Elementor addons Lite elementskit-lite.This issue affects ElementsKit Elementor addons Lite: from n/a through = 3.0.6...
CVE-2024-32510
CVE-2024-32510 is a reflected XSS in WP Cost Estimation & Payment Forms Builder (WordPress). It arises from improper input neutralization during web page generation, allowing reflected script execution. Affected: WP Cost Estimation & Payment Forms Builder: from n/a through 10.1.75. CVSS v3.1 base...
PT-2024-24664 · Netgsm · Netgsm
Name of the Vulnerable Software and Affected Versions: Netgsm versions n/a through 2.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can inject malicious...
CVE-2023-40000
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through 5.7...
CVE-2024-32453
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POEditor allows Stored XSS.This issue affects POEditor: from n/a through 0.9.8...
CVE-2024-32138
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in KaizenCoders Short URL allows Reflected XSS.This issue affects Short URL: from n/a through 1.6.8...
CVE-2024-2279 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.7 to 16.8.6 all versions starting from 16.9 before 16.9.4, all versions starting from 16.10 before 16.10.2. Using the autocomplete for issues references feature a crafted payload may lead to a stored XSS, allowin...
CVE-2024-31925
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FAKTOR VIER F4 Improvements allows Stored XSS.This issue affects F4 Improvements: from n/a through 1.8.0...
CVE-2024-31387
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Popup LikeBox Team Popup Like box allows Stored XSS.This issue affects Popup Like box: from n/a through 3.7.2...