18 matches found
EUVD-2024-36686
Malicious code in bioql PyPI...
EUVD-2024-30377
Malicious code in bioql PyPI...
EUVD-2024-43545
Malicious code in bioql PyPI...
CVE-2024-32575
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kraftplugins Mega Elements allows Stored XSS.This issue affects Mega Elements: from n/a through 1.1.9...
CVE-2024-47343
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kraft Plugins Mega Elements mega-elements-addons-for-elementor allows Stored XSS.This issue affects Mega Elements: from n/a through = 1.2.4...
CVE-2024-49693
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kraft Plugins Mega Elements mega-elements-addons-for-elementor allows Stored XSS.This issue affects Mega Elements: from n/a through = 1.2.6...
CVE-2024-49693
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Kraftplugins Mega Elements allows Stored XSS.This issue affects Mega Elements: from n/a through 1.2.6...
CVE-2024-49693
CVE-2024-49693 describes a stored XSS in Kraftplugins Mega Elements for Elementor, due to improper input neutralization during web page generation. Affected versions are Mega Elements from n/a through 1.2.6; Patch information indicates a fix in 1.2.7. Multiple sources (CVE entry, Red Hat/AR OS, P...
CVE-2024-47343
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kraft Plugins Mega Elements mega-elements-addons-for-elementor allows Stored XSS.This issue affects Mega Elements: from n/a through = 1.2.4...
CVE-2024-47343
CVE-2024-47343 describes a Stored XSS in WordPress plugin Mega Elements (Addons for Elementor) affecting versions up to 1.2.4. Patchstack reports the issue, with a fix available in version 1.2.5. Mitigation: upgrade to 1.2.5 or later. The vulnerability is a cross-site scripting flaw arising from ...
CVE-2024-37466
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Kraftplugins Mega Elements.This issue affects Mega Elements: from n/a through 1.2.2...
CVE-2024-37466
CVE-2024-37466 describes an XSS vulnerability in the WordPress plugin Mega Elements (Addons for Elementor) . The issue is caused by improper neutralization of input during web page generation and affects Mega Elements: from n/a through 1.2.2 . Connected documents corroborate the vulnerability und...
PT-2024-27577
Name of the Vulnerable Software and Affected Versions Kraftplugins Mega Elements versions 1.2.2 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for the execution of malicious scripts o...
CVE-2024-32575
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kraftplugins Mega Elements allows Stored XSS.This issue affects Mega Elements: from n/a through 1.1.9...
CVE-2024-32575
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kraftplugins Mega Elements allows Stored XSS.This issue affects Mega Elements: from n/a through 1.1.9...
CVE-2024-32575 WordPress Mega Elements plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kraftplugins Mega Elements allows Stored XSS.This issue affects Mega Elements: from n/a through 1.1.9...
CVE-2024-32575
CVE-2024-32575 affects Mega Elements – Addons for Elementor. The vulnerability is a Stored Cross-Site Scripting (XSS) in Mega Elements <= 1.1.9. Public sources (Red Hat advisory and Wordfence vulnerability details) confirm the affected product and the issue type. The issue arises from improper...
PT-2024-24696 · Kraftplugins · Kraftplugins Mega Elements
Name of the Vulnerable Software and Affected Versions: Kraftplugins Mega Elements versions 1.1.9 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means an attacker can inject malicious scripts into the...