PT-2024-33612 · Unknown · Campus Explorer Widget

Name of the Vulnerable Software and Affected Versions: Campus Explorer Widget versions 1.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS in the Campus Explorer...

CVE-2024-49660: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CampusExplorer Campus Explorer Widget campus-explorer-widget allows Reflected XSS.This issue affects Campus Explorer Widget: from n/a through = 1.4...

CVE-2024-10266: Improper Neutralization of Input During Web Page Generation

The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video Box widget in all versions up to, and including, 4.10.60 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-9505: Improper Neutralization of Input During Web Page Generation

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button widget in all versions up to, and including, 2.8.4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible...

WordPress plugin Campus Explorer Widget has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2024-16218 · WordPress · Move Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Move Addons for Elementor plugin for WordPress versions up to, and including, 1.3.5 Description: The issue allows authenticated attackers with Contributor-level access and above to extract sensitive private, pending, and draft template data v...

CVE-2024-50575

In JetBrains YouTrack before 2024.3.47707 reflected XSS was possible in Widget API...

CVE-2024-50575

In JetBrains YouTrack before 2024.3.47707 reflected XSS was possible in Widget API...

CVE-2024-50575

CVE-2024-50575 affects JetBrains YouTrack prior to version 2024.3.47707, where reflected XSS was possible via the Widget API. The vulnerability is documented across multiple feeds (NVD, Red Hat advisory, CNVD, CNVD, and Nessus plugin) as a cross-site scripting issue in the Widget API in YouTrack’...

EUVD-2024-44956

In JetBrains YouTrack before 2024.3.47707 reflected XSS was possible in Widget API...

CVE-2024-50575

In JetBrains YouTrack before 2024.3.47707 reflected XSS was possible in Widget API...

PT-2024-35510

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bounds checker error in the dapm widget list create function has been resolved. The error occurred because the num widgets variable, which is used for bounds checking, was not set befo...

CVE-2024-50575: Improper Neutralization of Input During Web Page Generation

In JetBrains YouTrack before 2024.3.47707 reflected XSS was possible in Widget API...

PT-2024-7636

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2024.3.47707 Description The issue is related to the Widget API component of JetBrains YouTrack, which fails to protect the web page structure. This can lead to reflected XSS attacks, allowing an attacker t...

CVE-2024-10091

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Comparison Widget in all versions up to, and including, 3.2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-10091 ElementsKit Elementor addons <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Comparison Widget in all versions up to, and including, 3.2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

PT-2024-16216

Name of the Vulnerable Software and Affected Versions Clever Addons for Elementor plugin for WordPress versions up to, and including, 2.2.1 Description The issue allows authenticated attackers with Contributor-level access and above to extract sensitive private, pending, and draft template data...

CVE-2024-10091: Improper Neutralization of Input During Web Page Generation

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Comparison Widget in all versions up to, and including, 3.2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

WordPress plugin ElementsKit, Elementor addons – cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-16019 · WordPress · Elementskit Elementor Addons Plugin

Name of the Vulnerable Software and Affected Versions: ElementsKit Elementor addons plugin for WordPress versions up to, and including, 3.2.9 Description: The issue is related to Stored Cross-Site Scripting via the Image Comparison Widget due to insufficient input sanitization and output escaping...