CVE-2024-11054

CVE-2024-11054 affects SourceCodester Simple Music Cloud Community System 1.0, specifically the endpoint /music/ajax.php?action=signup where the argument/parameter named pp can be manipulated to achieve an unrestricted file upload. The vulnerability is remotely exploitable and was publicly disclo...

PT-2024-16727 · Unknown · Sourcecodester Simple Music Cloud Community System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Music Cloud Community System version 1.0 Description: A critical vulnerability was found in the SourceCodester Simple Music Cloud Community System. This issue affects unknown code of the file /music/ajax.php?action=signu...

SourceCodester Simple Music Cloud Community System 代码问题漏洞

SourceCodester Simple Music Cloud Community System is a SourceCodester open source simple music cloud community system. A code issue vulnerability exists in version 1.0 of the SourceCodester Simple Music Cloud Community System, which stems from the parameter pp in the file...

PT-2024-34717 · Unknown · Simple Goods

Name of the Vulnerable Software and Affected Versions: Simple Goods versions 0.1.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS in Simple Goods. Recommendations: For...

CVE-2024-51599

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Russell Albin Simple Business Manager allows Stored XSS.This issue affects Simple Business Manager: from n/a through 4.6.7.4...

CVE-2024-51599 WordPress Simple Business Manager plugin <= 4.6.7.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in russell.albin Simple Business Manager simple-business-manager allows Stored XSS.This issue affects Simple Business Manager: from n/a through = 4.6.7.4...

CVE-2024-51599

CVE-2024-51599 is a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Simple Business Manager (versions up to and including 4.6.7.4). The issue stems from improper input neutralization during web page generation. Affected product: WordPress Simple Business Manager plugin; af...

CVE-2024-51759

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Detlef Beyer SVT Simple svt-simple allows Reflected XSS.This issue affects SVT Simple: from n/a through = 1.0.1...

CVE-2024-51718

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arsdehnel Simple Modal simplemodal allows Cross-Site Scripting XSS.This issue affects Simple Modal: from n/a through = 0.3.3...

CVE-2024-51718 WordPress Simple Modal plugin <= 0.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arsdehnel Simple Modal simplemodal allows Cross-Site Scripting XSS.This issue affects Simple Modal: from n/a through = 0.3.3...

CVE-2024-51718 WordPress Simple Modal plugin <= 0.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arsdehnel Simple Modal simplemodal allows Cross-Site Scripting XSS.This issue affects Simple Modal: from n/a through = 0.3.3...

CVE-2024-51718

CVE-2024-51718 is a Reflected XSS in Simple Modal (Improp­er Input Neutralization during Web Page Generation). Affected: Simple Modal versions up to 0.3.3. Root cause: improper neutralization of user input leading to script execution when pages generate content that incorporates untrusted input. ...

CVE-2024-51759 WordPress SVT Simple plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Detlef Beyer SVT Simple svt-simple allows Reflected XSS.This issue affects SVT Simple: from n/a through = 1.0.1...

CVE-2024-51759 WordPress SVT Simple plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Detlef Beyer SVT Simple allows Reflected XSS.This issue affects SVT Simple: from n/a through 1.0.1...

CVE-2024-51759

CVE-2024-51759 describes a reflected XSS in SVT Simple (WordPress plugin) due to improper neutralization of input during web page generation. The vulnerability affects SVT Simple versions up to 1.0.1. The CVSS base score listed is 7.1 (HIGH) with NETWORK attack vector, low complexity, and user in...

CVE-2024-51602

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in oleksandr87 Simple Job Manager simple-job-manager allows SQL Injection.This issue affects Simple Job Manager: from n/a through = 1.1...

CVE-2024-51602 WordPress Simple Job Manager plugin <= 1.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in oleksandr87 Simple Job Manager simple-job-manager allows SQL Injection.This issue affects Simple Job Manager: from n/a through = 1.1...

CVE-2024-51602

CVE-2024-51602 : SQL Injection in WordPress plugin Simple Job Manager (versions n/a–1.1) due to improper neutralization of SQL elements. The issue affects the plugin as described in multiple sources; no exploit details or in‑the‑wild data are provided in the documents. The vulnerability carries a...

CVE-2024-51602 WordPress Simple Job Manager plugin <= 1.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in oleksandr87 Simple Job Manager simple-job-manager allows SQL Injection.This issue affects Simple Job Manager: from n/a through = 1.1...

WordPress plugin Simple Business Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...