CVE-2024-43951

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CryoutCreations Tempera allows Stored XSS.This issue affects Tempera: from n/a through 1.8.2...

CVE-2024-43950

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Nextbricks Brickscore allows Stored XSS.This issue affects Brickscore: from n/a through 1.4.2.5...

CVE-2024-43934

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Robert Felty Collapsing Archives allows Stored XSS.This issue affects Collapsing Archives: from n/a through 3.0.5...

CVE-2024-43936

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPDeveloper EmbedPress allows Stored XSS.This issue affects EmbedPress: from n/a through 4.0.8...

CVE-2024-43920

CVE-2024-43920 (Jegstudio Gutenverse) is a Stored XSS in Gutenverse (Authenticated via Contributor+) affecting Gutenverse releases up to 1.9.4. The issue arises from improper neutralization of user input during web page generation, enabling attacker-supplied content to execute in a victim’s brows...

CVE-2024-43934

CVE-2024-43934 affects the Collapsing Archives WordPress plugin. It is a Stored XSS caused by improper neutralization of input during web page generation, affecting versions up to 3.0.5 (n/a to 3.0.5). Remediation: update to the patched version 3.0.5.

CVE-2024-43935 WordPress WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) plugin <= 1.6.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WP Delicious Delicious Recipes – WordPress Recipe Plugin allows Stored XSS.This issue affects Delicious Recipes – WordPress Recipe Plugin: from n/a through 1.6.7...

CVE-2024-43950

CVE-2024-43950 affects the Brickscore WordPress plugin. It reports stored XSS due to improper input neutralization during web page generation, with Brickscore versions n/a through 1.4.2.5 affected. The vulnerability is currently listed as Unpatched by the sources in the Connected documents; no pu...

CVE-2024-43951

CVE-2024-43951 describes a Stored Cross-Site Scripting (XSS) flaw in CryoutCreations Tempera (WordPress theme). Affected versions are Tempera from n/a through 1.8.2. The vulnerability is due to improper neutralization of user input during web page generation, enabling stored XSS. Public reference...

CVE-2024-43952

CVE-2024-43952 is a Stored XSS in CryoutCreations Esotera theme (WordPress), affecting Esotera versions up to 1.2.5.1. Root cause: improper input neutralization during web page generation. Wordfence notes patching status; remediation is to update to a patched release. No exploitation details are ...

CVE-2024-43958

CVE-2024-43958 describes a Reflected XSS in the IntoTheDark WordPress theme/plugin by Gianni Porto. Publicly documented as impacting IntoTheDark: from n/a through 1.0.5, due to Improper Neutralization of Input During Web Page Generation. The connected Red Hat and ENISA entries corroborate the CVE...

CVE-2024-43960

CVE-2024-43960: Stored XSS in Web and WooCommerce Addons for WPBakery Builder (WPBakery Page Builder) due to improper input neutralization. Affected: Web and WooCommerce Addons for WPBakery Builder, versions n/a–1.4.6. Impact: stored cross-site scripting; specifics on exploit vectors and patch st...

CVE-2024-43963

CVE-2024-43963 is a reflected XSS in the YellowPencil Visual CSS Style Editor for WordPress (WaspThemes), allowing input neutralization bypass during HTML generation for versions up to 7.6.1. The issue is confirmed in multiple sources and is classified as a Web page generation input handling flaw...

CVE-2024-43964

CVE-2024-43964 is a stored cross-site scripting vulnerability in the WordPress plugin DSGVO All in one for WP . According to the provided references, the issue arises from improper neutralization of input during web page generation, allowing stored XSS. Affected versions are listed as from n/a th...

CVE-2024-39620

CVE-2024-39620 is the WordPress ListingPro plugin SQL Injection vulnerability (ListingPro

CVE-2024-8297 kitsada8621 Digital Library Management System jwt_refresh_token_middleware.go JwtRefreshAuth neutralization for logs

A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been classified as problematic. Affected is the function JwtRefreshAuth of the file middleware/jwtrefreshtokenmiddleware.go. The manipulation of the argument Authorization leads to improper output neutralizatio...

CVE-2024-8297

Summary: CVE-2024-8297 affects kitsada8621 Digital Library Management System v1.0. The vulnerability lies in the function JwtRefreshAuth within middleware/jwt_refresh_token_middleware.go , where manipulation of the Authorization parameter leads to improper output neutralization for logs. This iss...

CVE-2024-8297 kitsada8621 Digital Library Management System jwt_refresh_token_middleware.go JwtRefreshAuth neutralization for logs

A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been classified as problematic. Affected is the function JwtRefreshAuth of the file middleware/jwtrefreshtokenmiddleware.go. The manipulation of the argument Authorization leads to improper output neutralizatio...

CVE-2024-8297 kitsada8621 Digital Library Management System jwt_refresh_token_middleware.go JwtRefreshAuth neutralization for logs

A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been classified as problematic. Affected is the function JwtRefreshAuth of the file middleware/jwtrefreshtokenmiddleware.go. The manipulation of the argument Authorization leads to improper output neutralizatio...

CVE-2024-43986

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MagePeople Team Taxi Booking Manager for WooCommerce allows Stored XSS.This issue affects Taxi Booking Manager for WooCommerce: through 1.0.9...