9011 matches found
PT-2024-33360 · Unknown · Mahesh Patel Mitm Bug Tracker
Name of the Vulnerable Software and Affected Versions: Mahesh Patel Mitm Bug Tracker versions n/a through 1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: F...
WordPress plugin WordPress Video 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin WordPress...
WordPress plugin El mejor Cluster 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
PT-2024-33371 · Unknown · Plexx Elementor Extension
Name of the Vulnerable Software and Affected Versions: Plexx Elementor Extension versions 1.3.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations...
WordPress plugin MAS Elementor 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...
CVE-2024-49283
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VillaTheme CURCY woo-multi-currency allows Reflected XSS.This issue affects CURCY: from n/a through = 2.2.3...
CVE-2024-49278
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in omnipressteam Omnipress omnipress allows Stored XSS.This issue affects Omnipress: from n/a through = 1.4.3...
CVE-2024-49264
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicheaddons Events Addon for Elementor events-addon-for-elementor allows Stored XSS.This issue affects Events Addon for Elementor: from n/a through = 2.2.0...
CVE-2024-49259
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicheaddons Primary Addon for Elementor primary-addon-for-elementor allows Stored XSS.This issue affects Primary Addon for Elementor: from n/a through = 1.5.8...
CVE-2024-49255
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Daniele Alessandra Da Reactions da-reactions allows Stored XSS.This issue affects Da Reactions: from n/a through = 5.1.5...
CVE-2024-49262 WordPress Country Flags for Elementor plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in wepic Country Flags for Elementor allows Stored XSS.This issue affects Country Flags for Elementor: from n/a through 1.0.1...
CVE-2024-49262
CVE-2024-49262 affects the WordPress plugin Country Flags for Elementor (versions up to 1.0.1). The issue is an Stored XSS vulnerability caused by improper neutralization of input during web page generation, enabling an attacker to inject scripts that persist in pages served to users. Public sour...
CVE-2024-49263
CVE-2024-49263 affects the WordPress plugin My Favorites (versions n/a through 1.4.1). The issue is a stored XSS vulnerability caused by improper neutralization of user input during web page generation, allowing an attacker to inject malicious scripts that persist in the site and may execute when...
CVE-2024-49278 WordPress Omnipress plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in omnipressteam Omnipress allows Stored XSS.This issue affects Omnipress: from n/a through 1.4.3...
CVE-2024-49278
CVE-2024-49278 is a stored XSS vulnerability in the WordPress plugin Omnipress (Omnipress Omnipress) up to version 1.4.3, caused by improper neutralization of input during web page generation. The CVE entry notes that affected software ranges include <= 1.4.3, but no public remediation version...
CVE-2024-49316
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zodiac Akismet htaccess writer akismet-htaccess-writer allows Reflected XSS.This issue affects Akismet htaccess writer: from n/a through = 1.0.1...
CVE-2024-49319
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in B.M. Rafiul Alam Awesome Contact Form7 for Elementor awesome-contact-form7-for-elementor.This issue affects Awesome Contact Form7 for Elementor: from n/a through = 3.0...
CVE-2024-49282
CVE-2024-49282 concerns the WordPress plugin “Responsive Lightbox & Gallery” (dFactory Responsive Lightbox) and is a Cross-Site Scripting (Stored XSS) vulnerability in the plugin’s input handling during web page generation, affecting versions up to 2.4.8. The root cause, as reported, is improper ...
CVE-2024-49296
CVE-2024-49296 is a stored XSS vulnerability in the WordPress plugin “Custom Add to Cart Button Label and Link” (affected: versions up to 1.6.1). The issue arises from improper neutralization of input during web page generation, enabling stored cross-site scripting. Public exploit details are not...