PT-2025-14732 · Unknown · Think201 Clients

Name of the Vulnerable Software and Affected Versions: Think201 Clients versions 1.1.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Think201 Clients...

CVE-2025-23751

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Think201 Data Dash data-dash allows Reflected XSS.This issue affects Data Dash: from n/a through = 1.2.3...

CVE-2025-23751

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Think201 Data Dash data-dash allows Reflected XSS.This issue affects Data Dash: from n/a through = 1.2.3...

CVE-2025-23751

CVE-2025-23751 affects the WordPress Data Dash plugin (Data Dash) up to version 1.2.3, enabling Reflected XSS via improper input handling during page generation. This is tied to Data Dash and is corroborated by Red Hat and CVE listings. The provided sources do not include a remediation patch vers...

CVE-2024-56033

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Think201 FAQs faqs allows Reflected XSS.This issue affects FAQs: from n/a through = 1.0.2...

CVE-2024-53765

Cross-Site Request Forgery CSRF vulnerability in Think201 Mins To Read mins-to-read allows Stored XSS.This issue affects Mins To Read: from n/a through = 1.2.2...

CVE-2024-56033

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Think201 FAQs faqs allows Reflected XSS.This issue affects FAQs: from n/a through = 1.0.2...

CVE-2024-54245

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Think201 Clients clients allows Stored XSS.This issue affects Clients: from n/a through = 1.1.4...

CVE-2024-54246

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Think201 FAQs faqs allows Stored XSS.This issue affects FAQs: from n/a through = 1.0.2...

CVE-2024-54244

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Think201 Easy Replace easy-replace allows Stored XSS.This issue affects Easy Replace: from n/a through = 1.3...

CVE-2024-54243

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Think201 Echoza echoza allows Stored XSS.This issue affects Echoza: from n/a through = 0.1.1...

CVE-2024-54246

CVE-2024-54246 corresponds to a Cross-Site Scripting (Stored XSS) vulnerability in the WordPress FAQs plugin, affecting versions up to 1.0.2. The issue is described as improper neutralization of input during web page generation. The connected documents confirm the vulnerability exists in the FAQs...

CVE-2024-54245 WordPress Clients plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Think201 Clients clients allows Stored XSS.This issue affects Clients: from n/a through = 1.1.4...

CVE-2024-54245

CVE-2024-54245: WordPress Clients plugin is affected (versions up to 1.1.4). The issue is a Cross-Site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. The initial description notes the vulnerability as stored XSS impacting WordPress Clients. Co...

CVE-2024-54244

CVE-2024-54244: WordPress Easy Replace plugin (versions n/a through 1.3) suffers a Cross-Site Scripting (Stored XSS) due to improper input neutralization during web page generation. Affected product: WordPress plugin Easy Replace. Root cause: improper neutralization of input leading to stored XSS...

CVE-2024-54243 WordPress Echoza plugin <= 0.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Think201 Echoza echoza allows Stored XSS.This issue affects Echoza: from n/a through = 0.1.1...

CVE-2024-54243

CVE-2024-54243 concerns the WordPress Echoza plugin where improper input neutralization during web page generation leads to a stored XSS (Echoza &lt;= 0.1.1). The vulnerability affects Echoza versions up to 0.1.1 and is documented across multiple feeds as Cross-Site Scripting with Stored XSS impa...

PT-2024-36123 · Unknown · Think201 Easy Replace

Name of the Vulnerable Software and Affected Versions: Think201 Easy Replace versions n/a through 1.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For...

PT-2024-36124 · Unknown · Think201 Clients

Name of the Vulnerable Software and Affected Versions: Think201 Clients versions 1.1.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For version...

PT-2024-36125 · Unknown · Think201 Faqs

Name of the Vulnerable Software and Affected Versions: Think201 FAQs versions n/a through 1.0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in Think201 FAQs. Recommendations: For...