CVE-2024-43217

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Pierre Lebedel Kodex Posts likes allows Reflected XSS.This issue affects Kodex Posts likes: from n/a through 2.5.0...

CVE-2024-43216

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Filr filr-protection.This issue affects Filr: from n/a through = 1.2.4...

CVE-2024-43164

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Blockspare allows Stored XSS.This issue affects Blockspare: from n/a through 3.2.0...

CVE-2024-43152

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in iberezansky 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery allows Stored XSS.This issue affects 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery: from n/a through 1.15.6...

CVE-2024-43156

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AddonMaster Post Grid Master allows Reflected XSS.This issue affects Post Grid Master: from n/a through 3.4.10...

CVE-2024-43156

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AddonMaster Post Grid Master allows Reflected XSS.This issue affects Post Grid Master: from n/a through 3.4.10...

CVE-2024-43149

CM Tooltip Glossary (WordPress plugin) is affected by CVE-2024-43149 (Stored XSS). The vulnerability is authenticated and arises from improper input neutralization during web page generation, affecting versions up to 4.3.7. Patch: upgrade to 4.3.7 or newer (the fix is included in 4.3.7).

CVE-2024-43152

CVE-2024-43152 is a stored XSS in the iberezansky 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery WordPress plugin. Root cause: Improper input neutralization during web page generation. Affected: 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery (versions from n/a to 1.15.6). Pu...

CVE-2024-43155

CVE-2024-43155 is an authenticated Stored XSS vulnerability in PickPlugins ComboBlocks, affecting versions up to 2.2.86. Exploitation requires a Contributor+ privilege and malicious input is stored during web page generation. The issue is publicly reported (Wordfence/WordPress vulnerability data)...

CVE-2024-43161

CVE-2024-43161 involves an improperly neutralized input in Averta Depicter Slider, enabling stored XSS. Affected: Depicter Slider versions up to and including 3.1.2. Mode of attack: authenticated (Editor+) Stored Cross-Site Scripting. Impact is cross-site script execution within the application c...

CVE-2024-43163 WordPress ParcelPanel plugin <= 4.3.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Parcel Panel ParcelPanel allows Reflected XSS.This issue affects ParcelPanel: from n/a through 4.3.2...

CVE-2024-7590 WordPress Spectra plugin<= 2.14.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows DOM-Based XSS.This issue affects Spectra: from n/a through = 2.14.1...

CVE-2024-43213

CVE-2024-43213 is a Reflected XSS in MultiVendorX WC Marketplace (WC Marketplace) caused by improper input neutralization during web page generation. The vulnerability affects WC Marketplace releases up to 4.1.17, with the WC Marketplace entry marked as patched in public advisories. Affected prod...

CVE-2024-43216

The CVE CVE-2024-43216 targets Filr – Secure document library (WordPress plugin). It reports improper input neutralization leading to stored XSS in web page generation, affecting Filr library versions from n/a up to 1.2.4. The issue is categorized as Stored XSS with impact limited to confidential...

CVE-2024-43225

CVE-2024-43225 affects Enter Addons (WordPress plugin for Elementor). Evidence in connected data shows a Stored Cross-Site Scripting vulnerability that is exploitable by authenticated users (Contributor+). Root cause reported in multiple sources points to improper handling/neutralization of input...

CVE-2024-43227

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPDeveloper BetterDocs allows Stored XSS.This issue affects BetterDocs: from n/a through 3.5.8...

CVE-2024-43231

CVE-2024-43231 is a stored XSS in Tutor LMS (WordPress plugin) via improper neutralization of input during web page generation. Affected: Tutor LMS versions up to 2.7.3. The issue arises from inadequate sanitization of user-supplied content that is later embedded in web pages, enabling stored Cro...

CVE-2024-43233

CVE-2024-43233 is a Reflected XSS in BSK Forms Blacklist (BannerSky) plugin. The issue arises from improper input neutralization during web page generation, enabling crafted input to be reflected back to the user and potentially execute script in the victim’s browser. Affected versions are the BS...

WordPress plugin Selection Lite 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

WordPress plugin Xpro Elementor Addons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...