CVE-2024-28784

CVE-2024-28784 affects IBM QRadar SIEM 7.5. A stored XSS vulnerability exists in the Rule Wizard component (Regular Expression Logic Block) due to improper input sanitization, enabling an attacker to inject and persist arbitrary HTML/JavaScript that can execute in other authenticated users’ brows...

CVE-2024-29801

CVE-2024-29801 affects the WordPress plugin Fullscreen Galleria (versions up to 1.6.11). Connected sources identify it as a Stored Cross-Site Scripting vulnerability (XSS) arising from improper neutralization of input during web page generation. Some references also echo the generic root cause ph...

CVE-2024-29803

CVE-2024-29803 is a Stored XSS in FlatPM (Mehanoid.Pro) for WordPress, exploitable via the FlatPM plugin before 3.1.05. Root cause: improper input neutralization in web page generation. Impact: MEDIUM (CVSS 3.1 base 6.5) with potential confidentiality/integrity/availability impacts as described; ...

CVE-2024-29807

CVE-2024-29807 is a Stored XSS vulnerability in the DearFlip DearFlip WordPress plugin (DearFlip). The issue arises from improper neutralization of input during web page generation, enabling attacker-supplied input to be stored and later executed in the context of the victim’s browser. Affected p...

CVE-2024-29813

CVE-2024-29813 affects CartFlows Funnel Builder for WordPress, allowing Stored XSS via improper input handling during web page generation. Impact details are limited to Stored XSS with the affected range stated as n/a through 2.0.1; CVSS 3.1 base score 5.9. No fix version or remediation is provid...

CVE-2024-29815

Technical details for CVE-2024-29815 are not present in the connected documents. The initial description notes a Stored XSS in WP Change Email Sender up to version 1.3.0, but no product/version specifics, exploit info, or fixes are provided in the supplied materials. Monitor for updates.

CVE-2024-29818

CVE-2024-29818 – Stored XSS in WP Poll Maker (Poll Maker & Voting Plugin) for WordPress. Root cause: Improper neutralization of input during web page generation (Cross-site Scripting). Affected: WP Poll Maker versions from n/a through 3.1. The connected Red Hat entry repeats the same description;...

CVE-2024-30183

CVE-2024-30183 affects Livemesh Addons for WPBakery Page Builder. It is a Stored XSS caused by improper neutralization of input during web page generation, affecting versions up to 3.7. No explicit remediation details are provided in the connected documents; verify if a patch/version after 3.7 ex...

CVE-2024-30182

CVE-2024-30182 describes a Stored XSS in HasThemes HT Mega for Elementor caused by improper neutralization of input during web page generation. Affected: HT Mega up to version 2.4.3. Public details in the provided documents specify the issue and affected range but do not include a confirmed patch...

CVE-2024-30181

Technical details for CVE-2024-30181 are not provided in the connected documents. Public specifics (affected product/version, exploit info, remediation) are not available here. Monitor official advisories and vendor updates for new information.

CVE-2024-29931

WP Go Maps

CVE-2024-2962

CVE-2024-2962 affects the Networker - Tech News WordPress Theme with Dark Mode. The vulnerability arises from a missing capability check in the admin_reload_nav_menu() function, affecting all versions up to and including 1.1.9. This allows unauthenticated attackers to modify the location of displ...

CVE-2024-29928

CVE-2024-29928 is a reflected XSS in WP Codeus Advanced Sermons (vulnerable component: Advanced Sermons plugin). Root cause: improper neutralization of user input during web page generation, enabling cross-site scripting. Affected versions: Advanced Sermons up to 3.1 (no details for vendor versio...

CVE-2024-29926

CVE-2024-29926 is linked to a Cross-Site Scripting flaw in HasThemes WC Builder (WordPress). The Red Hat entry confirms an improper input neutralization during web page generation, enabling stored XSS. Affected product: WC Builder up to version 1.0.18 (n/a through 1.0.18). The public documents do...

CVE-2024-29925

Technical details about CVE-2024-29925 (affected product/version, root cause, impact, and fix) are not provided in the supplied documents; monitor for updates.

CVE-2024-29922

CVE-2024-29922: Affected product is the Slider Hero WordPress plugin (Quantum Cloud Slider Hero). The issue is a Stored XSS caused by improper neutralization of input during web page generation, enabling injected scripts to persist in pages generated by Slider Hero (vulnerable up to 8.6.1). The c...

CVE-2024-29921

Public details about CVE-2024-29921 are not provided in the connected documents. Technical specifics (exploit methods, affected versions beyond what’s listed, fix/mitigation) are not present here. Monitor for official advisories or vendor updates.

CVE-2024-29920

CVE-2024-29920 corresponds to a Stored XSS in Move Addons for Elementor plugin for WordPress, caused by improper neutralization of input during web page generation. The affected component is Move Addons for Elementor versions 1.2.9 and earlier; exploit path is via a cross-site scripting payload s...

CVE-2024-29919

Technical details about CVE-2024-29919 are not provided in the supplied documents. No information on affected versions, exploit status, or remediation is present. Monitor for updates.

CVE-2024-29918

CVE-2024-29918 : The Survey Maker WordPress plugin is described as vulnerable to a reflected Cross-Site Scripting (XSS) due to improper input neutralization during web page generation. Affected: Survey Maker (WordPress) versions from n/a through 4.0.6. Root cause: insufficient input sanitization ...