9011 matches found
WordPress plugin Event Manager for WooCommerce 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
WordPress plugin myCred Elementor 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
The vulnerability of the Golang programming language, related to the lack of measures to neutralize special elements, allows attackers to execute arbitrary code.
The vulnerability of the Go programming language is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Routed PON Controller Software component in the Cisco IOS XR operating system of Cisco NCS 540 Series Routers, NCS 5500 Series Routers, and NCS 5700 Series Routers allows attackers to execute arbitrary commands.
The vulnerability of the Routed PON Controller Software in Cisco IOS XR routers from the Cisco NCS 540 Series, NCS 5500 Series, and NCS 5700 Series routers exists due to the lack of measures taken to neutralize specific elements used in the operating system commands. Exploiting this vulnerability...
CVE-2024-47328
CVE-2024-47328 is an SQL Injection vulnerability in the WordPress plugin FunnelKit Automation By Autonami . It affects versions up to 3.1.2 and stems from improper neutralization of SQL commands. Exploitation requires Administrator privileges, with network attack potential and impact on confident...
CVE-2024-49619
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Acespritech Solutions Pvt. Ltd. Social Link Groups allows Blind SQL Injection.This issue affects Social Link Groups: from n/a through 1.1.0...
CVE-2024-49618
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Jordan Lyall MyTweetLinks allows Blind SQL Injection.This issue affects MyTweetLinks: from n/a through 1.1.1...
CVE-2024-49631
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Md Abdul Kader Easy Addons for Elementor easy-addons-for-elementor allows Stored XSS.This issue affects Easy Addons for Elementor: from n/a through = 1.5.0...
CVE-2024-48049
CVE-2024-48049 is a Stored XSS in Mighty Builder (WordPress) plugin up to version 1.0.2 caused by improper input neutralization during web page generation. The vulnerability affects Mighty Builder and can store malicious scripts on affected sites. Security ratings in the documents show a low over...
CVE-2024-49334 WordPress jLayer Parallax Slider plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Unizoe Web Solutions jLayer Parallax Slider jlayer-parallax-slider-wp allows Reflected XSS.This issue affects jLayer Parallax Slider: from n/a through = 1.0...
PT-2024-33561 · Dotsquares · Dotsquares Google Map Locations
Name of the Vulnerable Software and Affected Versions: Dotsquares Google Map Locations versions n/a through 1.0 Description: The issue is related to improper neutralization of input during web page generation, allowing Reflected XSS. This means an attacker can inject malicious scripts into the...
CVE-2024-43300
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bert Movie Database movie-database allows Stored XSS.This issue affects Movie Database: from n/a through = 1.0.11...
CVE-2024-43300 WordPress Movie Database plugin <= 1.0.11 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bert Movie Database movie-database allows Stored XSS.This issue affects Movie Database: from n/a through = 1.0.11...
CVE-2024-49231
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cyclop WordPress Video wordpress-video allows Stored XSS.This issue affects WordPress Video: from n/a through = 1.0...
CVE-2024-49225
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in swebdeveloper wpPricing Builder wppricing-builder-lite-responsive-pricing-table-builder allows Stored XSS.This issue affects wpPricing Builder: from n/a through = 1.5.0...
CVE-2024-49225
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Swebdeveloper wpPricing Builder allows Stored XSS.This issue affects wpPricing Builder: from n/a through 1.5.0...
CVE-2024-49228
CVE-2024-49228 describes a Stored XSS vulnerability in WordPress plugin bVerse Convert (versions
CVE-2024-49231
CVE-2024-49231 affects WordPress Video plugin (wordpress-video) version
CVE-2024-49238
CVE-2024-49238 covers the WordPress ADIF Log Search Widget (plugin) ≤ 1.0f, with a Reflected XSS via improper input neutralization during web page generation. The connected documents confirm the issue but do not provide a publicly available fixed version; Patchstack notes Fixed in: N/A and recomm...