CVE-2024-29928

CVE-2024-29928 is a reflected XSS in WP Codeus Advanced Sermons (vulnerable component: Advanced Sermons plugin). Root cause: improper neutralization of user input during web page generation, enabling cross-site scripting. Affected versions: Advanced Sermons up to 3.1 (no details for vendor versio...

CVE-2024-27952

CVE-2024-27952 is a reflected XSS in the WordPress plugin Advanced Sermons (WP Codeus) up to version 3.2, caused by improper input neutralization during web page generation. Exploitation requires user interaction; impact is limited to client-side script execution in the context of the affected si...

CVE-2024-50458

CVE-2024-50458 affects WordPress plugin Advanced Sermons (WP Codeus)

CVE-2024-7599

The CVE-2024-7599 entry concerns the WordPress plugin Advanced Sermons (versions <= 3.3). It describes a Stored Cross-Site Scripting (XSS) via the sermon_video_embed parameter caused by insufficient input sanitization and output escaping. The vulnerability requires authenticated access at Cont...