Latest CVE Feed
-
7.1
HIGHCVE-2024-51706
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Upeksha Wisidagama UW Freelancer allows Reflected XSS.This issue affects UW Freelancer: from n/a through 0.1.... Read more
Affected Products :- Published: Nov. 09, 2024
- Modified: Nov. 12, 2024
-
6.5
MEDIUMCVE-2024-51787
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in QuomodoSoft ElementsReady Addons for Elementor allows Stored XSS.This issue affects ElementsReady Addons for Elementor: from n/a through 6.4.3.... Read more
Affected Products : elementsready- Published: Nov. 09, 2024
- Modified: Nov. 12, 2024
-
7.1
HIGHCVE-2024-51779
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Stranger Studios (WordCamp Philly) Don't Break The Code allows Reflected XSS.This issue affects Don't Break The Code: from n/a through .3.1.... Read more
Affected Products :- Published: Nov. 09, 2024
- Modified: Nov. 12, 2024
-
7.1
HIGHCVE-2024-51701
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Mahesh Waghmare MG Post Contributors allows Reflected XSS.This issue affects MG Post Contributors: from n/a through 1.3..... Read more
Affected Products :- Published: Nov. 09, 2024
- Modified: Nov. 12, 2024
-
7.1
HIGHCVE-2024-51778
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Starfish Reviews Satisfaction Reports from Help Scout allows Reflected XSS.This issue affects Satisfaction Reports from Help Scout: from n/a throu... Read more
Affected Products :- Published: Nov. 09, 2024
- Modified: Nov. 12, 2024
-
7.1
HIGHCVE-2024-51705
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in James Bruner WP MMenu Lite allows Reflected XSS.This issue affects WP MMenu Lite: from n/a through 1.0.0.... Read more
Affected Products :- Published: Nov. 09, 2024
- Modified: Nov. 12, 2024
-
7.1
HIGHCVE-2024-51782
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Sanjaysolutions Loginplus allows Stored XSS.This issue affects Loginplus: from n/a through 1.2.... Read more
Affected Products :- Published: Nov. 09, 2024
- Modified: Nov. 12, 2024
-
7.1
HIGHCVE-2024-51783
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in zaus Forms: 3rd-Party Post Again allows Reflected XSS.This issue affects Forms: 3rd-Party Post Again: from n/a through 0.3.... Read more
Affected Products :- Published: Nov. 09, 2024
- Modified: Nov. 12, 2024
-
7.1
HIGHCVE-2024-51718
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Adam Dehnel Simple Modal allows Reflected XSS.This issue affects Simple Modal: from n/a through 0.3.3.... Read more
Affected Products :- Published: Nov. 09, 2024
- Modified: Nov. 12, 2024
-
7.1
HIGHCVE-2024-51763
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Biplob Adhikari Team Showcase and Slider – Team Members Builder allows Reflected XSS.This issue affects Team Showcase and Slider – Team Members Bu... Read more
Affected Products :- Published: Nov. 09, 2024
- Modified: Nov. 12, 2024
-
7.1
HIGHCVE-2024-51710
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Minerva Infotech Responsive Data Table allows Reflected XSS.This issue affects Responsive Data Table: from n/a through 1.3.... Read more
Affected Products :- Published: Nov. 09, 2024
- Modified: Nov. 12, 2024
-
7.1
HIGHCVE-2024-51776
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in samhotchkiss Daily Image allows Reflected XSS.This issue affects Daily Image: from n/a through 1.0.... Read more
Affected Products :- Published: Nov. 09, 2024
- Modified: Nov. 12, 2024
-
7.1
HIGHCVE-2024-51676
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Delicious Delisho allows Reflected XSS.This issue affects Delisho: from n/a through 1.0.6.... Read more
Affected Products :- Published: Nov. 09, 2024
- Modified: Nov. 12, 2024
-
7.1
HIGHCVE-2024-51760
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in RistrettoApps Dashing Memberships allows Reflected XSS.This issue affects Dashing Memberships: from n/a through 1.1.... Read more
Affected Products :- Published: Nov. 09, 2024
- Modified: Nov. 12, 2024
-
6.5
MEDIUMCVE-2024-51786
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BestWebSoft Realty by BestWebSoft allows Stored XSS.This issue affects Realty by BestWebSoft: from n/a through 1.1.5.... Read more
Affected Products :- Published: Nov. 09, 2024
- Modified: Nov. 12, 2024
-
7.1
HIGHCVE-2024-51761
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zack Gilbert and Paul Jarvis WPHelpful allows Reflected XSS.This issue affects WPHelpful: from n/a through 1.2.4.... Read more
Affected Products :- Published: Nov. 09, 2024
- Modified: Nov. 12, 2024
-
7.1
HIGHCVE-2024-51759
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Detlef Beyer SVT Simple allows Reflected XSS.This issue affects SVT Simple: from n/a through 1.0.1.... Read more
Affected Products :- Published: Nov. 09, 2024
- Modified: Nov. 12, 2024
-
9.8
CRITICALCVE-2024-10547
The WP Membership plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the user_profile_image_upload() function in all versions up to, and including, 1.6.2. This makes it possible for unauthenticated attacker... Read more
Affected Products :- Published: Nov. 09, 2024
- Modified: Nov. 12, 2024
-
7.1
HIGHCVE-2024-51784
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in VietFriend team FriendStore for WooCommerce allows Reflected XSS.This issue affects FriendStore for WooCommerce: from n/a through 1.4.2.... Read more
Affected Products :- Published: Nov. 09, 2024
- Modified: Nov. 12, 2024
-
8.5
HIGHCVE-2024-51620
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Porsline allows Blind SQL Injection.This issue affects Porsline: from n/a through 1.0.2.... Read more
Affected Products :- Published: Nov. 09, 2024
- Modified: Nov. 12, 2024