CVE-2024-49308

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Toast Plugins Animator scroll-triggered-animations allows Reflected XSS.This issue affects Animator: from n/a through = 3.0.15...

CVE-2024-49308 WordPress Animator – Scroll Triggered Animations plugin <= 3.0.15 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Toast Plugins Animator scroll-triggered-animations allows Reflected XSS.This issue affects Animator: from n/a through = 3.0.15...

CVE-2024-49308

CVE-2024-49308 is a Reflected XSS in the WordPress plugin “Animator – Scroll Triggered Animations” (vulnerable:

PT-2024-33447 · Unknown · Toast Plugins Animator

Name of the Vulnerable Software and Affected Versions: Toast Plugins Animator versions 3.0.11 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Reflected XSS Cross-site Scripting vulnerability. This allows for Reflected...

CVE-2024-33646

Cross-Site Request Forgery CSRF vulnerability in Toast Plugins Sticky Anything allows Cross-Site Scripting XSS.This issue affects Sticky Anything: from n/a through 2.1.5...

CVE-2024-33646

CVE-2024-33646 (Sticky Anything, Toast plugin) affects the WordPress plugin Sticky Anything (Toast Stick Anything) up to version 2.1.5. The connected documents indicate a Missing Authorization issue that allows a CSRF attack to trigger a Cross‑Site Scripting (XSS) condition. The description from ...

PT-2024-25407 · Toast Plugins · Toast Plugins Sticky Anything

Name of the Vulnerable Software and Affected Versions: Toast Plugins Sticky Anything versions through 2.1.5 Description: A Cross-Site Request Forgery CSRF issue in Toast Plugins Sticky Anything allows Cross-Site Scripting XSS. Recommendations: For versions through 2.1.5, update to a version later...

CVE-2024-30551

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Toast Plugins Sticky Anything.This issue affects Sticky Anything: from n/a through 2.1.5...

CVE-2024-30551 WordPress Sticky Anything plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Toast Plugins Sticky Anything.This issue affects Sticky Anything: from n/a through 2.1.5...

CVE-2024-30551

CVE-2024-30551 (Sticky Anything, Toast Stick Anything WordPress plugin) is an unauthenticated Stored XSS in Sticky Anything, affecting versions up to 2.1.5. The CVSSv3.1 score is 7.1 (HIGH) with Network attack vector, no privileges, user interaction required, and changed scope; impact to confiden...