9010 matches found
CVE-2024-43988
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in digitalnature Mystique allows Stored XSS.This issue affects Mystique: from n/a through 2.5.7...
CVE-2024-43983
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Podlove Podlove Podcast Publisher allows Stored XSS.This issue affects Podlove Podcast Publisher: from n/a through 4.1.13...
CVE-2024-43987
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in wayneconnor Sliding Door allows Stored XSS.This issue affects Sliding Door: from n/a through 3.6...
CVE-2024-43970
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in SureCart allows Reflected XSS.This issue affects SureCart: from n/a through 2.29.3...
ROS-20240918-04
Webmin hosting control panel vulnerability is related to failure to take measures to protect the structure of a web page. of the web page. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code A vulnerability in the ajaxterm module of the Webmin hosti...
Eliz Panel 跨站脚本漏洞
Eliz Panel is a control panel from Eliz, Inc. A cross-site scripting vulnerability exists in Eliz Panel versions prior to 2.3.24, which stems from incorrect neutralization of input during web page generation, allowing for reflection-based cross-site scripting attacks...
CVE-2024-43971
CVE-2024-43971 refers to WP Sunshine Sunshine Photo Cart (WordPress) versions up to 3.2.5 and describes a reflected XSS caused by improper input neutralization during web page generation. Exploitation requires an attacker to craft malicious input, enabling execution of arbitrary scripts in a user...
CVE-2024-43975 WordPress Super Store Finder plugin <= 6.9.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in highwarden Super Store Finder allows Cross-Site Scripting XSS.This issue affects Super Store Finder: from n/a through 6.9.7...
CVE-2024-43987
CVE-2024-43987 is a stored XSS in the WordPress theme Sliding Door (Aka Sliding Door plugin) due to improper input neutralization during page generation. Affected versions are n/a through 3.6. Public sources identify the vulnerability as Stored XSS in Sliding Door and reference a remediation path...
CVE-2024-43988
CVE-2024-43988 involves a Stored XSS in the Mystique WordPress theme by digitalnature caused by improper neutralization of input during web page generation. Affected: Mystique up to 2.5.7 (n/a through 2.5.7). The issue enables injection of malicious scripts via user input embedded in generated pa...
CVE-2024-45452
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CryoutCreations Septera septera allows Stored XSS.This issue affects Septera: from n/a through 1.5.1...
CVE-2024-45451
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cryout-creations Roseta roseta allows Stored XSS.This issue affects Roseta: from n/a through = 1.3.0...
CVE-2024-44049
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeHunk Gutenberg Blocks unlimited-blocks.This issue affects Gutenberg Blocks: from n/a through = 1.2.8...
CVE-2024-44004
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows SQL Injection. This issue affects WPCargo Track & Trace: before 8.0.4...
CVE-2024-44047
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in IDX Broker IMPress for IDX Broker allows Stored XSS.This issue affects IMPress for IDX Broker: from n/a through 3.2.2...
CVE-2024-44047
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IDX Broker IMPress for IDX Broker idx-broker-platinum allows Stored XSS.This issue affects IMPress for IDX Broker: from n/a through = 3.2.2...
CVE-2024-44003
CVE-2024-44003 describes a Reflected Cross‑Site Scripting vulnerability in the WordPress plugin Spice Starter Sites . Affected versions are
CVE-2024-44008 WordPress Geo Mashup plugin <= 1.13.12 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Stored XSS.This issue affects Geo Mashup: from n/a through = 1.13.12...
CVE-2024-44047
The CVE-2024-44047 entry concerns the WordPress plugin IMPress for IDX Broker (
CVE-2024-43985
CVE-2024-43985 is a stored XSS vulnerability in the MagePeople WordPress plugin “Bus Ticket Booking with Seat Reservation” (WPBusTicketly) up to version 5.3.5. The issue stems from improper input neutralization during web page generation, enabling stored cross-site scripting via user-supplied inp...