CVE-2024-51892

CVE-2024-51892 describes a Stored XSS in the WordPress plugin Sell Media File with Stripe (naa986) affecting versions up to 1.0.6. The root cause is improper input neutralization during web page generation . Affected software is listed as from n/a through 1.0.6. Remediation recommended: update to...

CVE-2024-51895 WordPress Minical Hotel Booking Plugin plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pankaj9296 Minical Hotel Booking Plugin minical allows Stored XSS.This issue affects Minical Hotel Booking Plugin: from n/a through = 1.0.2...

CVE-2024-51898 WordPress Semantic Shortcode plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sachin8600 Semantic Shortcode semantic-shortcode allows Stored XSS.This issue affects Semantic Shortcode: from n/a through = 1.0.1...

CVE-2024-51899

The CVE-2024-51899 entry covers the WordPress plugin Simple Pricing Table (versions

CVE-2024-51907

CVE-2024-51907: The WP Virtual Room Configurator plugin (codemenschen) has a Stored XSS in versions 1.0.0 and earlier due to improper input neutralization during page generation. Public sources corroborate a WordPress plugin vulnerability affecting WP Virtual Room Configurator up to 1.0.0 with re...

CVE-2024-51908

CVE-2024-51908 is a DOM-based XSS in the WordPress plugin Adventure Bucket List (WordPress plugin family). The vulnerability arises from improper input neutralization during page generation, enabling DOM-based cross-site scripting. Affected versions are reported as “from n/a through 1.0.9” for Ad...

CVE-2024-51917

CVE-2024-51917 is a stored XSS in the WordPress plugin Multiple Votes in one page (versions 1.0.0–1.0.4). The issue arises from Improper Neutralization of Input During Web Page Generation, allowing user-supplied input to be stored and subsequently rendered on pages, enabling stored Cross-Site Scr...

CVE-2024-51920

CVE-2024-51920 affects Map Store Locator (WordPress plugin) versions 1.2.1 and earlier. Root cause: improper input neutralization during web page generation, enabling DOM-Based XSS. Impact: DOM-based cross-site scripting as described; no exploitation details provided in the sources. Remediation: ...

CVE-2024-51921 WordPress scrollup plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in midori scrollup scrollup allows DOM-Based XSS.This issue affects scrollup: from n/a through = 1.1...

CVE-2024-51921

CVE-2024-51921 pertains to the WordPress plugin scrollup (Midori) and is described as an input sanitization flaw that enables cross-site scripting. Technical details across connected docs indicate the issue affects scrollup versions up to 1.1 (n/a through 1.1) and is characterized as a Cross-Site...

CVE-2024-51928

CVE-2024-51928 is a WordPress plugin vulnerability in Blocks Post Grid (

CVE-2024-51932

CVE-2024-51932 is a DOM-based Cross-Site Scripting vulnerability in the WordPress Kings Tab Slider plugin, affecting versions from n/a through 1.0 (including

Cross-site Scripting (XSS)

django-cms is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper neutralization of input during web page generation, allowing malicious scripts to be injected and executed...

WordPress plugin Community Yard Sale 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress plugin Google Visualization Charts 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin WP Listings Pro 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-34961 · Unknown · Luzuk Slider

Name of the Vulnerable Software and Affected Versions: Luzuk Slider versions 0.1.5 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means an attacker can inject malicious scripts in...

WordPress plugin Semantic Shortcode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

WordPress plugin Be Shortcodes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

WordPress plugin Pro Addons For Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...