CVE-2024-3784 Improper Neutralization of Server-Side Includes (SSI) vulnerability in WBSAirback

Vulnerability in WBSAirback 21.02.04, which involves improper neutralisation of Server-Side Includes SSI, through S3 Accounts /admin/CloudAccounts. Exploitation of this vulnerability could allow a remote user to execute arbitrary code...

CVE-2024-32137

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Solwin User Activity Log Pro.This issue affects User Activity Log Pro: from n/a through 2.3.4...

CVE-2024-32136

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Xenioushk BWL Advanced FAQ Manager.This issue affects BWL Advanced FAQ Manager: from n/a through 2.0.3...

CVE-2024-32139

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast Publisher: from n/a through 4.0.12...

CVE-2024-32132

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Codeboxr Team CBX Bookmark & Favorite.This issue affects CBX Bookmark & Favorite: from n/a through 1.7.20...

CVE-2024-32132

CVE-2024-32132: CBX Bookmark & Favorite (WordPress plugin CBXWPBookmark) is affected by an SQL Injection vulnerability up to version 1.7.20. The connected Wordfence entry labels it as an Authenticated (Administrator+) SQL Injection, indicating exploitation requires an authenticated admin+ user; n...

CVE-2024-32135

CVE-2024-32135 refers to an SQL Injection flaw in the WPZest Disable Comments plugin for WordPress (Disable Comments | WPZest), affecting version up to 1.51. Connected sources confirm the vulnerability type and affected plugin, but do not provide a patch; patch status is listed as Unpatched. The ...

CVE-2024-32139

CVE-2024-32139 : Podlove Podlove Podcast Publisher for WordPress contains an authenticated SQL Injection flaw (improper neutralization of input in SQL commands). Affected versions are Podlove Podlove Podcast Publisher

CVE-2024-32453

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POEditor allows Stored XSS.This issue affects POEditor: from n/a through 0.9.8...

CVE-2024-32429

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPChill Remove Footer Credit allows Stored XSS.This issue affects Remove Footer Credit: from n/a through 1.0.13...

CVE-2024-32138

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in KaizenCoders Short URL allows Reflected XSS.This issue affects Short URL: from n/a through 1.6.8...

CVE-2024-32133

CVE-2024-32133 is a reflected XSS in the EZ Form Calculator WordPress plugin (EZ Form Calculator) affecting versions up to 2.14.0.3. The vulnerability is documented as not patched in the connected material; no mitigation or patches are described within the provided documents.

CVE-2024-32453

CVE-2024-32453 : Stored XSS in the POEditor WordPress plugin (

CVE-2024-2279 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.7 to 16.8.6 all versions starting from 16.9 before 16.9.4, all versions starting from 16.10 before 16.10.2. Using the autocomplete for issues references feature a crafted payload may lead to a stored XSS, allowin...

CVE-2024-31387

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Popup LikeBox Team Popup Like box allows Stored XSS.This issue affects Popup Like box: from n/a through 3.7.2...

CVE-2024-31925

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FAKTOR VIER F4 Improvements allows Stored XSS.This issue affects F4 Improvements: from n/a through 1.8.0...

CVE-2024-31928

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Darko Top Bar allows Stored XSS.This issue affects Top Bar: from n/a through 3.0.5...

CVE-2024-31361 WordPress bunny.net plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bunny.Net allows Stored XSS.This issue affects bunny.Net: from n/a through 2.0.1...

CVE-2024-31387

CVE-2024-31387 affects the Popup Like box – Page Plugin for WordPress (Popup Like box). It is a Stored XSS due to Improper Neutralization of Input During Web Page Generation, impacting versions from n/a to 3.7.2. The root cause is improper handling of input in web page generation, enabling stored...

CVE-2024-31926

CVE-2024-31926 is a stored XSS in BracketSpace Advanced Cron Manager – debug & control. Affected: Advanced Cron Manager – debug & control versions up to 2.5.2. Root cause: improper neutralization of input during web page generation. Impact: stored cross-site scripting. Remediation: patch/update t...