Lucene search
K

2020 matches found

NVD
NVD
added 2024/11/11 7:15 a.m.26 views

CVE-2024-52354

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cool Plugins Web Stories Widgets For Elementor shortcodes-for-amp-web-stories-and-elementor-widget allows Stored XSS.This issue affects Web Stories Widgets For Elementor: from n/a through = 1.1...

6.5CVSS0.00258EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/11 6:13 a.m.15 views

CVE-2024-52354 WordPress Web Stories Widgets For Elementor plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Cool Plugins Web Stories Widgets For Elementor allows Stored XSS.This issue affects Web Stories Widgets For Elementor: from n/a through 1.1...

6.5CVSS6.8AI score0.00258EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/11 6:13 a.m.21 views

CVE-2024-52354 WordPress Web Stories Widgets For Elementor plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cool Plugins Web Stories Widgets For Elementor shortcodes-for-amp-web-stories-and-elementor-widget allows Stored XSS.This issue affects Web Stories Widgets For Elementor: from n/a through = 1.1...

6.5CVSS0.00258EPSS
Exploits0References1
CVE
CVE
added 2024/11/11 6:13 a.m.54 views

CVE-2024-52354

CVE-2024-52354 affects the WordPress plugin Web Stories Widgets For Elementor (stored XSS in web story widgets). Public writeups in the connected Red Hat and Wordfence entries confirm the issue is an improper neutralization of input during web page generation, enabling a stored XSS payload that c...

6.5CVSS7.2AI score0.00258EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/11/11 12:0 a.m.2 views

WordPress plugin Web Stories Widgets For Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.5CVSS7.6AI score0.00258EPSS
Exploits0References2
OSV
OSV
added 2024/11/09 3:15 p.m.1 views

CVE-2024-51597

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ThemeShark ThemeShark Templates & Widgets for Elementor allows Stored XSS.This issue affects ThemeShark Templates & Widgets for Elementor: from n/a through 1.1.7...

5.4CVSS5.8AI score0.00248EPSS
Exploits0References1
NVD
NVD
added 2024/11/09 3:15 p.m.16 views

CVE-2024-51597

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themeshark ThemeShark Templates & Widgets for Elementor themeshark-elementor allows Stored XSS.This issue affects ThemeShark Templates & Widgets for Elementor: from n/a through = 1.1.7...

6.5CVSS0.00248EPSS
Exploits0References1
CVE
CVE
added 2024/11/09 2:33 p.m.49 views

CVE-2024-51597

CVE-2024-51597 is a stored XSS vulnerability in WordPress ThemeShark Templates & Widgets for Elementor (themeshark-elementor). The issue arises from improper neutralization of input during web page generation, affecting the plugin versions up to 1.1.7. Public sources consistently describe it as S...

6.5CVSS5.9AI score0.00248EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2024/11/09 2:15 p.m.4 views

CVE-2024-51662

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Modernaweb Studio Black Widgets For Elementor allows Stored XSS.This issue affects Black Widgets For Elementor: from n/a through 1.3.6...

5.4CVSS5.8AI score0.00248EPSS
Exploits0References1
NVD
NVD
added 2024/11/09 2:15 p.m.20 views

CVE-2024-51662

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Modernaweb Studio Black Widgets For Elementor black-widgets.This issue affects Black Widgets For Elementor: from n/a through = 1.3.6...

6.5CVSS0.00248EPSS
Exploits0References1
NVD
NVD
added 2024/11/09 2:15 p.m.20 views

CVE-2024-51613

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bidbud TradeMe widgets trademe-widget allows Stored XSS.This issue affects TradeMe widgets: from n/a through = 1.2...

6.5CVSS0.00243EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/09 2:7 p.m.12 views

CVE-2024-51613 WordPress TradeMe widgets plugin <= 1.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bidbud TradeMe widgets trademe-widget allows Stored XSS.This issue affects TradeMe widgets: from n/a through = 1.2...

6.5CVSS5.9AI score0.00243EPSS
Exploits0References1
CVE
CVE
added 2024/11/09 2:7 p.m.57 views

CVE-2024-51613

CVE-2024-51613 describes a Stored XSS in the WordPress plugin TradeMe widgets (versions n/a–1.2) due to improper input neutralization during page generation. Exploitation details are not provided in the connected documents; no patch/version fix is specified. Affected software: TradeMe widgets. Ro...

6.5CVSS5.9AI score0.00243EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/09 1:12 p.m.23 views

CVE-2024-51662 WordPress Black Widgets For Elementor plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Modernaweb Studio Black Widgets For Elementor black-widgets.This issue affects Black Widgets For Elementor: from n/a through = 1.3.6...

6.5CVSS5.9AI score0.00248EPSS
Exploits0References1
CVE
CVE
added 2024/11/09 1:12 p.m.47 views

CVE-2024-51662

CVE-2024-51662 is a stored XSS in WordPress plugin Black Widgets For Elementor (versions ≤ 1.3.6) due to improper input neutralization during page generation. Connected sources confirm affected plugin and version range, with remediation guidance to upgrade to a version later than 1.3.6 (cited by ...

6.5CVSS5.9AI score0.00248EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/11/09 1:12 p.m.22 views

CVE-2024-51662 WordPress Black Widgets For Elementor plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Modernaweb Studio Black Widgets For Elementor black-widgets.This issue affects Black Widgets For Elementor: from n/a through = 1.3.6...

6.5CVSS0.00248EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/09 12:0 a.m.2 views

WordPress plugin TradeMe widgets 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6AI score0.00243EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/11/09 12:0 a.m.5 views

PT-2024-34756 · Unknown · Andrew Connell Trademe Widgets

Name of the Vulnerable Software and Affected Versions: Andrew Connell TradeMe widgets versions n/a through 1.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS in Andrew Connell...

6.5CVSS5.7AI score0.00243EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/11/09 12:0 a.m.3 views

WordPress plugin Black Widgets For Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.5CVSS5.9AI score0.00248EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/09 12:0 a.m.3 views

WordPress plugin ThemeShark Templates & Widgets for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6AI score0.00248EPSS
Exploits0References1
Rows per page
Query Builder