CVE-2024-54243

CVE-2024-54243 concerns the WordPress Echoza plugin where improper input neutralization during web page generation leads to a stored XSS (Echoza <= 0.1.1). The vulnerability affects Echoza versions up to 0.1.1 and is documented across multiple feeds as Cross-Site Scripting with Stored XSS impa...

CVE-2024-54244

CVE-2024-54244: WordPress Easy Replace plugin (versions n/a through 1.3) suffers a Cross-Site Scripting (Stored XSS) due to improper input neutralization during web page generation. Affected product: WordPress plugin Easy Replace. Root cause: improper neutralization of input leading to stored XSS...

CVE-2024-54243 WordPress Echoza plugin <= 0.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Think201 Echoza echoza allows Stored XSS.This issue affects Echoza: from n/a through = 0.1.1...

PT-2024-36125 · Unknown · Think201 Faqs

Name of the Vulnerable Software and Affected Versions: Think201 FAQs versions n/a through 1.0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in Think201 FAQs. Recommendations: For...

PT-2024-36124 · Unknown · Think201 Clients

Name of the Vulnerable Software and Affected Versions: Think201 Clients versions 1.1.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For version...

CVE-2024-54243: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Think201 Echoza echoza allows Stored XSS.This issue affects Echoza: from n/a through = 0.1.1...

CVE-2024-54245: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Think201 Clients clients allows Stored XSS.This issue affects Clients: from n/a through = 1.1.4...

CVE-2024-54246: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Think201 FAQs faqs allows Stored XSS.This issue affects FAQs: from n/a through = 1.0.2...

PT-2024-36123 · Unknown · Think201 Easy Replace

Name of the Vulnerable Software and Affected Versions: Think201 Easy Replace versions n/a through 1.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For...

CVE-2024-54244: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Think201 Easy Replace easy-replace allows Stored XSS.This issue affects Easy Replace: from n/a through = 1.3...

CVE-2024-53765

Cross-Site Request Forgery CSRF vulnerability in Think201 Mins To Read mins-to-read allows Stored XSS.This issue affects Mins To Read: from n/a through = 1.2.2...

CVE-2024-53765

CVE-2024-53765 is a CSRF-to-Stored XSS vulnerability affecting the WordPress plugin Mins To Read (versions up to 1.2.2). The provided documents confirm the issue but do not specify exploitation details or a confirmed fixed version; the Patchstack/CVE entries indicate older versions are affected, ...

CVE-2024-53765: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Think201 Mins To Read mins-to-read allows Stored XSS.This issue affects Mins To Read: from n/a through = 1.2.2...