CVE-2024-29910

CVE-2024-29910 refers to a Stored Cross-Site Scripting (XSS) flaw in the WordPress plugin “Dropdown Multisite selector.” The connected data indicate this affects versions up to 0.9.2 (listed as <= 0.9.2) with the issue described as Stored XSS via shortcode. The vulnerability is categorized as ...

CVE-2024-29909

Technical details for CVE-2024-29909 are not publicly provided in the supplied documents. Monitor for updates from vendors/patch sources; current items reference the vulnerability but do not specify remediation or affected versions beyond 2.2.0.

CVE-2024-29820

CVE-2024-29820 is a stored XSS in RedNao PDF Builder for WPForms caused by improper neutralization of input during web page generation. Affected product: PDF Builder for WPForms, versions: n/a through 1.2.88. CVSS 3.1 vector: AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L (base 6.5, MEDIUM). Connected sourc...

CVE-2024-29907

CVE-2024-29907 affects the SEO Backlink Monitor plugin for WordPress, exposing a Reflected XSS in web page generation. Affected: SEO Backlink Monitor

CVE-2024-30196

CVE-2024-30196 affects Appscreo Easy Social Share Buttons for WordPress (affected: up to version 9.4). The vulnerability is an improper neutralization of input during web page generation, resulting in a reflected cross-site scripting (XSS) flaw. The Red Hat entry confirms the CVE and its descript...

CVE-2024-27188

CVE-2024-27188 concerns the WordPress Breeze plugin (Cloudways Breeze) with a stored XSS vulnerability caused by improper neutralization of input during web page generation. Affected versions are Breeze through 2.1.3; the patch is to upgrade to version 2.1.4 or later. The issue requires the attac...

CVE-2024-30197

CVE-2024-30197 corresponds to an authenticated Stored XSS in the WordPress plugin Church Admin. According to the entry, Church Admin versions up to 4.0.26 are affected and allow stored XSS via shortcode due to improper input neutralization during web page generation. The vulnerability impact is c...

CVE-2024-22299

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Foliovision: Making the web work for you FV Flowplayer Video Player allows Reflected XSS.This issue affects FV Flowplayer Video Player: from n/a through 7.5.41.7212...

CVE-2024-30199

CVE-2024-30199 is a Reflected XSS in WP-Lister Lite for Amazon (WordPress plugin) affecting versions up to 2.6.8. Connected Red Hat entry corroborates the same vulnerability description. The CVSSv3.1 base metrics provided in the initial data indicate a base score of 7.1 (HIGH) with Network attack...

CVE-2024-22288

Technical details about CVE-2024-22288 are not publicly provided in the supplied documents; monitor for updates.

CVE-2024-22311

Technical details about CVE-2024-22311 are not publicly provided in the supplied documents. The initial entry notes an XSS issue in Simply Schedule Appointments but no affected versions, impact specifics, exploit info, or fixes are disclosed here. Monitor for updates.

PT-2024-22212

Name of the Vulnerable Software and Affected Versions NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX-MS, WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP...

CVE-2024-27188

Improper Neutralization of Input During Web Page Generation ‘Cross-site Scripting’ vulnerability in Cloudways Breeze allows Stored XSS.This issue affects Breeze: from n/a through 2.1.3. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

PT-2024-23290 · WordPress · Tomas Wordpress Tooltips

Name of the Vulnerable Software and Affected Versions: Tomas WordPress Tooltips versions prior to 9.4.5 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential remote attacks...

PT-2024-10136 · Tacjs · Tacjs

Name of the Vulnerable Software and Affected Versions: TacJS versions 0.0.0 through 6.4.9 Description: The issue is related to improper neutralization of input during web page generation, which allows for Cross-Site Scripting XSS attacks. This can enable a remote attacker to perform inter-site...

CVE-2023-28687 Reflected Cross-Site Scripting (XSS) vulnerability in multiple WordPress themes

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in perfectwpthemes Glaze Blog Lite, themebeez Fascinate, themebeez Cream Blog, themebeez Cream Magazine allows Reflected XSS.This issue affects Glaze Blog Lite: from n/a through = 1.1.4; Fascinate: fr...

CVE-2023-28687 Reflected Cross-Site Scripting (XSS) vulnerability in multiple WordPress themes

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in perfectwpthemes Glaze Blog Lite, themebeez Fascinate, themebeez Cream Blog, themebeez Cream Magazine allows Reflected XSS.This issue affects Glaze Blog Lite: from n/a through = 1.1.4; Fascinate: fr...

CVE-2024-30232

Technical details about CVE-2024-30232 are not present in the provided connected documents. The data only references a stored XSS issue in Exclusive Addons for Elementor (up to v2.6.9) without specifics. Monitor official advisories for remediation.

CVE-2023-49839 Reflected Cross-Site Scripting vulnerability in multiple WordPress components by KlbTheme

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in KlbTheme Cosmetsy theme core plugin, KlbTheme Partdo theme core plugin, KlbTheme Bacola theme core plugin, KlbTheme Medibazar theme core plugin, KlbTheme Furnob theme core plugin, KlbTheme Clotya...

CVE-2024-2889

CVE-2024-2889 is a Stored XSS in WP Lister Lite for Amazon (WP-Lister Lite for Amazon) affecting versions up to 2.6.11. The description across sources confirms improper input neutralization during web page generation enabling Stored XSS. No explicit patch/remediation details are provided in the c...