8897 matches found
CVE-2024-51842
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sazzad Image Carousel Shortcode image-carousel-shortcode allows DOM-Based XSS.This issue affects Image Carousel Shortcode: from n/a through = 1.2...
CVE-2024-51833
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nomaniplex Easy Social Sharebar easy-social-sharebar allows Stored XSS.This issue affects Easy Social Sharebar: from n/a through = 1.0.0...
CVE-2024-51822
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in keonthemes Creative Blocks creative-blocks allows Stored XSS.This issue affects Creative Blocks: from n/a through = 1.0.1...
CVE-2024-51824
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Karam Singh Advanced Video Player with Analytics advanced-video-player-with-analytics allows DOM-Based XSS.This issue affects Advanced Video Player with Analytics: from n/a through = 1...
CVE-2024-51816
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saul Morales Pacheco Banner System banner-system allows Stored XSS.This issue affects Banner System: from n/a through = 1.0.0...
CVE-2024-51810
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in George Lewe Lewe Bootstrap Visuals shortcode-bootstrap-visuals allows Stored XSS.This issue affects Lewe Bootstrap Visuals: from n/a through = 3.0.1...
CVE-2024-51811
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hussam Hussien Popup Image popup-image allows Stored XSS.This issue affects Popup Image: from n/a through = 1.0.1...
CVE-2024-51808
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pat O’Brien codeSnips codesnips allows Stored XSS.This issue affects codeSnips: from n/a through = 1.2...
CVE-2024-51801
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jakeatthrive Brand my Footer brand-my-footer allows DOM-Based XSS.This issue affects Brand my Footer: from n/a through = 1.1...
CVE-2024-51798
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Surbma Surbma | Font Awesome surbma-font-awesome allows DOM-Based XSS.This issue affects Surbma | Font Awesome: from n/a through = 3.0...
CVE-2024-50556
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WorldMarkerter WM Zoom wm-zoom allows DOM-Based XSS.This issue affects WM Zoom: from n/a through = 1.0...
CVE-2024-50547
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mark Hodder Themedy Toolbox themedy-toolbox allows DOM-Based XSS.This issue affects Themedy Toolbox: from n/a through = 1.0.16...
CVE-2024-50540
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in demixpress dp AddThis dp-addthis allows Stored XSS.This issue affects dp AddThis: from n/a through = 1.0.2...
CVE-2024-50536
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tamer Ziady GDReseller gdreseller allows DOM-Based XSS.This issue affects GDReseller: from n/a through = 1.6...
CVE-2024-50532
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jerin K Alexander Events Manager Pro – extended events-manager-pro-extended allows Reflected XSS.This issue affects Events Manager Pro – extended: from n/a through = 0.1...
CVE-2024-50513
The CVE-2024-50513 vulnerability affects WordPress PostX plugin (Post Grid Gutenberg Blocks and WordPress Blog Plugin) versions up to and including 4.1.15. The underlying flaw is improper neutralization of input during web page generation, enabling Stored XSS. Impact is described as stored XSS wi...
CVE-2024-50516
CVE-2024-50516 affects WordPress Countdown & Clock plugin, specifically versions up to 2.8.0.9 (WordPress Countdown & Clock). The vulnerability is a Cross-Site Scripting (Stored XSS) due to improper input neutralization during web page generation, as described by multiple sources. The CVE descrip...
CVE-2024-50517
CVE-2024-50517 affects WordPress ID-SK Toolkit plugin (ID-SK Toolkit) up to version 1.7.2, with a Stored XSS due to improper input neutralization during page generation. Public details across connected sources confirm the vulnerability and affected range (1.7.2 and earlier); no fix version is pro...
CVE-2024-50522 WordPress WeChat Subscribers Lite plugin <= 1.6.6 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in redyyu WeChat Subscribers Lite wechat-subscribers-lite allows Reflected XSS.This issue affects WeChat Subscribers Lite : from n/a through = 1.6.6...