9015 matches found
CVE-2024-56226 WordPress Royal Elementor Addons plugin <= 1.7.1001 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows Reflected XSS.This issue affects Royal Elementor Addons: from n/a through = 1.7.1001...
WordPress plugin Royal Elementor Addons 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...
WordPress plugin Ledenbeheer 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin.... A cross-site scripting...
WordPress plugin Kintpv Wooconnect 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...
PT-2024-36758 · Unknown · Gulri Slider
Name of the Vulnerable Software and Affected Versions: Gulri Slider versions 3.5.8 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected cross-site scripting XSS. This means an attacker can inject malicious scripts...
WordPress plugin Gulri Slider 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...
CVE-2024-47924
Boa web server – CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2024-47920
Tiki Wiki CMS – CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2024-47926 Tecnick TCExam – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Tecnick TCExam – CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'...
CVE-2024-47925
CVE-2024-47925 concerns Tecnick TCExam, with a Cross-site Scripting (CWE-79) vulnerability arising from improper input neutralization during web page generation. Reports from NVD/CVELIST/CIRCL and vendor pages confirm impact as high on confidentiality (CWEs indicate XSS) and a network-attack surf...
CVE-2024-47925 Tecnick TCExam – Multiple CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Tecnick TCExam – Multiple CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2024-47924
CVE-2024-47924 affects the Boa web server with a Cross-site Scripting (CWE-79) vulnerability caused by improper neutralization of input during web page generation. The available documents confirm the issue but do not provide affected versions, exploit details, or a published fix. Several sources ...
CVE-2024-47924 Boa web server – CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Boa web server – CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2024-47920
CVE-2024-47920 affects Tiki Wiki CMS Groupware (CPE: cpe:/a:tiki:tikiwiki_cms%2fgroupware). It describes a Cross-site Scripting (XSS) vulnerability (CWE-79) caused by improper neutralization of input during web page generation. CVSSv3.1 indicates a high severity (7.5) with network attack vector, ...
CVE-2024-47920 Tiki Wiki CMS – CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Tiki Wiki CMS – CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2024-47919 Tiki Wiki CMS – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Tiki Wiki CMS – CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...
CVE-2024-47918
CVE-2024-47918 pertains to Tiki Wiki CMS Groupware, with publicly available details indicating a CWE-80 Basic XSS due to improper neutralization of script-related HTML tags in web pages, affecting versions before 28.0 (OpenVAS entry notes multiple vulnerabilities). Additional sources flag potenti...
CVE-2024-47918 Tiki Wiki CMS – CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Tiki Wiki CMS – CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS...
CVE-2024-47917
The provided sources confirm CVE-2024-47917 is an XSS (CWE-79) vulnerability affecting Mobotix CCTV firmware. Affected component: Mobotix CCTV firmware MX-V3.4.2.16 (per CNNVD entry). Root cause: improper neutralization/encoding of input during web page generation. Impact: cross-site scripting wi...