Lucene search
+L

9010 matches found

NVD
NVD
added 2024/09/18 12:15 a.m.19 views

CVE-2024-43988

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in digitalnature Mystique allows Stored XSS.This issue affects Mystique: from n/a through 2.5.7...

6.5CVSS0.00274EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/18 12:15 a.m.34 views

CVE-2024-43983

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Podlove Podlove Podcast Publisher allows Stored XSS.This issue affects Podlove Podcast Publisher: from n/a through 4.1.13...

6.5CVSS0.00281EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/18 12:15 a.m.7 views

CVE-2024-43987

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in wayneconnor Sliding Door allows Stored XSS.This issue affects Sliding Door: from n/a through 3.6...

5.4CVSS5.8AI score0.00274EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/18 12:15 a.m.8 views

CVE-2024-43970

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in SureCart allows Reflected XSS.This issue affects SureCart: from n/a through 2.29.3...

6.1CVSS5.8AI score0.00256EPSS
SaveExploits0References1
Redos
Redos
added 2024/09/18 12:0 a.m.47 views

ROS-20240918-04

Webmin hosting control panel vulnerability is related to failure to take measures to protect the structure of a web page. of the web page. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code A vulnerability in the ajaxterm module of the Webmin hosti...

8.8CVSS6.7AI score0.00798EPSS
SaveExploits9
CNNVD
CNNVD
added 2024/09/18 12:0 a.m.7 views

Eliz Panel 跨站脚本漏洞

Eliz Panel is a control panel from Eliz, Inc. A cross-site scripting vulnerability exists in Eliz Panel versions prior to 2.3.24, which stems from incorrect neutralization of input during web page generation, allowing for reflection-based cross-site scripting attacks...

9.4CVSS6AI score0.00252EPSS
SaveExploits0References2
CVE
CVE
added 2024/09/17 11:32 p.m.72 views

CVE-2024-43971

CVE-2024-43971 refers to WP Sunshine Sunshine Photo Cart (WordPress) versions up to 3.2.5 and describes a reflected XSS caused by improper input neutralization during web page generation. Exploitation requires an attacker to craft malicious input, enabling execution of arbitrary scripts in a user...

7.1CVSS5.9AI score0.00593EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/17 11:29 p.m.11 views

CVE-2024-43975 WordPress Super Store Finder plugin <= 6.9.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in highwarden Super Store Finder allows Cross-Site Scripting XSS.This issue affects Super Store Finder: from n/a through 6.9.7...

7.1CVSS6.5AI score0.00258EPSS
SaveExploits0References1
CVE
CVE
added 2024/09/17 11:26 p.m.68 views

CVE-2024-43987

CVE-2024-43987 is a stored XSS in the WordPress theme Sliding Door (Aka Sliding Door plugin) due to improper input neutralization during page generation. Affected versions are n/a through 3.6. Public sources identify the vulnerability as Stored XSS in Sliding Door and reference a remediation path...

6.5CVSS6.2AI score0.00274EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2024/09/17 11:24 p.m.61 views

CVE-2024-43988

CVE-2024-43988 involves a Stored XSS in the Mystique WordPress theme by digitalnature caused by improper neutralization of input during web page generation. Affected: Mystique up to 2.5.7 (n/a through 2.5.7). The issue enables injection of malicious scripts via user input embedded in generated pa...

6.5CVSS6.2AI score0.00274EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/09/17 11:15 p.m.6 views

CVE-2024-45452

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CryoutCreations Septera septera allows Stored XSS.This issue affects Septera: from n/a through 1.5.1...

5.4CVSS5.8AI score0.00274EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/17 11:15 p.m.28 views

CVE-2024-45451

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cryout-creations Roseta roseta allows Stored XSS.This issue affects Roseta: from n/a through = 1.3.0...

6.5CVSS0.00274EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/17 11:15 p.m.36 views

CVE-2024-44049

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeHunk Gutenberg Blocks unlimited-blocks.This issue affects Gutenberg Blocks: from n/a through = 1.2.8...

6.5CVSS0.00248EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/17 11:15 p.m.28 views

CVE-2024-44004

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows SQL Injection. This issue affects WPCargo Track & Trace: before 8.0.4...

9.8CVSS0.00462EPSS
SaveExploits1References1
OSV
OSV
added 2024/09/17 11:15 p.m.10 views

CVE-2024-44047

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in IDX Broker IMPress for IDX Broker allows Stored XSS.This issue affects IMPress for IDX Broker: from n/a through 3.2.2...

5.4CVSS5.8AI score0.00248EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/17 11:15 p.m.26 views

CVE-2024-44047

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IDX Broker IMPress for IDX Broker idx-broker-platinum allows Stored XSS.This issue affects IMPress for IDX Broker: from n/a through = 3.2.2...

6.5CVSS0.00248EPSS
SaveExploits0References1
CVE
CVE
added 2024/09/17 11:10 p.m.53 views

CVE-2024-44003

CVE-2024-44003 describes a Reflected Cross‑Site Scripting vulnerability in the WordPress plugin Spice Starter Sites . Affected versions are

7.1CVSS5.9AI score0.00258EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/09/17 11:3 p.m.15 views

CVE-2024-44008 WordPress Geo Mashup plugin <= 1.13.12 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Stored XSS.This issue affects Geo Mashup: from n/a through = 1.13.12...

6.5CVSS5.9AI score
SaveExploits0References4
CVE
CVE
added 2024/09/17 11:0 p.m.69 views

CVE-2024-44047

The CVE-2024-44047 entry concerns the WordPress plugin IMPress for IDX Broker (

6.5CVSS5.9AI score0.00248EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2024/09/17 10:41 p.m.62 views

CVE-2024-43985

CVE-2024-43985 is a stored XSS vulnerability in the MagePeople WordPress plugin “Bus Ticket Booking with Seat Reservation” (WPBusTicketly) up to version 5.3.5. The issue stems from improper input neutralization during web page generation, enabling stored cross-site scripting via user-supplied inp...

5.9CVSS5.7AI score0.00262EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder