Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-51848 State: PUBLISHED Published: 2024-11-19T16:31:36.110Z Last Updated: 2024-11-20T14:45:33.396Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Digital Zoom Studio Products: Parallaxer Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digital Zoom Studio Parallaxer allows Stored XSS.This issue affects Parallaxer: from n/a through 1.00. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/parallaxer-lite-parallax-effects-on-images/wordpress-parallaxer-plugin-1-00-cross-site-scripting-xss-vulnerabil
rability/parallaxer-lite-parallax-effects-on-images/wordpress-parallaxer-plugin-1-00-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51849 State: PUBLISHED Published: 2024-11-19T16:31:35.587Z Last Updated: 2024-11-20T14:36:15.739Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Marco Piarulli Products: My Restaurant Menu Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marco Piarulli My Restaurant Menu allows Stored XSS.This issue affects My Restaurant Menu: from n/a through 0.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/my-restaurant-menu/wordpress-my-restaurant-menu-plugin-0-2-0-cross-site-scripting-xss-vulnerabil
/database/vulnerability/my-restaurant-menu/wordpress-my-restaurant-menu-plugin-0-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51850 State: PUBLISHED Published: 2024-11-19T16:31:35.067Z Last Updated: 2024-11-20T14:36:15.862Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: bchristopeit Products: WoW Guild Armory Roster Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bchristopeit WoW Guild Armory Roster allows Stored XSS.This issue affects WoW Guild Armory Roster: from n/a through 0.5.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/guild-armory-roster/wordpress-wow-guild-armory-roster-plugin-0-5-5-cross-site-scripti
chstack.com/database/vulnerability/guild-armory-roster/wordpress-wow-guild-armory-roster-plugin-0-5-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51851 State: PUBLISHED Published: 2024-11-19T16:31:34.521Z Last Updated: 2024-11-20T14:26:14.183Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: saleh attari Products: best bootstrap widgets for elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in saleh attari best bootstrap widgets for elementor allows DOM-Based XSS.This issue affects best bootstrap widgets for elementor: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/best-bootstrap-widgets-for-elementor/wordpres
Vulnrichment: References: - https://patchstack.com/database/vulnerability/best-bootstrap-widgets-for-elementor/wordpress-best-bootstrap-widgets-for-elementor-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51852 State: PUBLISHED Published: 2024-11-19T16:31:33.937Z Last Updated: 2024-11-20T14:26:14.326Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: DynamicWebLab Products: Dynamic Post Grid Elementor Addon Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DynamicWebLab Dynamic Post Grid Elementor Addon allows DOM-Based XSS.This issue affects Dynamic Post Grid Elementor Addon: from n/a through 1.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/dynamic-post-grid-elementor-addon/wordpress-dynami
richment: References: - https://patchstack.com/database/vulnerability/dynamic-post-grid-elementor-addon/wordpress-dynamic-post-grid-elementor-addon-plugin-1-0-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51853 State: PUBLISHED Published: 2024-11-19T16:31:33.405Z Last Updated: 2024-11-20T14:26:14.436Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Alberuni Azad Products: Faltu Testimonial Rotator Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alberuni Azad Faltu Testimonial Rotator allows DOM-Based XSS.This issue affects Faltu Testimonial Rotator: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/faltu-testimonial-rotator/wordpress-faltu-testimonial-rotator-plugin-1-0-0
https://patchstack.com/database/vulnerability/faltu-testimonial-rotator/wordpress-faltu-testimonial-rotator-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51854 State: PUBLISHED Published: 2024-11-19T16:31:32.659Z Last Updated: 2024-11-20T14:26:14.541Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Hola Networks Products: Hola Free Video Player Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hola Networks Hola Free Video Player allows DOM-Based XSS.This issue affects Hola Free Video Player: from n/a through 1.3.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/hola-free-video-player/wordpress-hola-free-video-player-plugin-1-3-9-cross-site-scr
atchstack.com/database/vulnerability/hola-free-video-player/wordpress-hola-free-video-player-plugin-1-3-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51855 State: PUBLISHED Published: 2024-11-19T16:31:32.123Z Last Updated: 2024-11-20T14:26:14.657Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Productineer Products: Redirecter Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Productineer Redirecter allows DOM-Based XSS.This issue affects Redirecter: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/shortcode-for-redirection/wordpress-redirecter-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51856 State: PUBLISHED Published: 2024-11-19T16:31:31.591Z Last Updated: 2024-11-20T14:26:14.770Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WP Moose Products: Moose Elementor Kit Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Moose Moose Elementor Kit allows DOM-Based XSS.This issue affects Moose Elementor Kit: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/moose-elementor-kit/wordpress-moose-elementor-kit-plugin-1-0-0-cross-site-scripting-xss-vulnerability?
ase/vulnerability/moose-elementor-kit/wordpress-moose-elementor-kit-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51857 State: PUBLISHED Published: 2024-11-19T16:31:31.068Z Last Updated: 2024-11-20T14:26:14.878Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Olympus Themes Products: Olympus Shortcodes Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Olympus Themes Olympus Shortcodes allows DOM-Based XSS.This issue affects Olympus Shortcodes: from n/a through 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/olympus-shortcodes/wordpress-olympus-shortcodes-plugin-1-0-4-cross-site-scripting-xss-vulnera
com/database/vulnerability/olympus-shortcodes/wordpress-olympus-shortcodes-plugin-1-0-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51858 State: PUBLISHED Published: 2024-11-19T16:31:30.517Z Last Updated: 2024-11-20T14:26:14.983Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Umar Products: Social Locker Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Umar Social Locker allows Stored XSS.This issue affects Social Locker: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/social-locker-content/wordpress-social-locker-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51859 State: PUBLISHED Published: 2024-11-19T16:31:29.985Z Last Updated: 2024-11-20T14:26:15.190Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Bamboo Mcr Products: Bamboo Enquiries Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bamboo Mcr Bamboo Enquiries allows Stored XSS.This issue affects Bamboo Enquiries: from n/a through 1.9.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/bamboo-enquiries/wordpress-bamboo-enquiries-plugin-1-9-3-stored-cross-site-scripting-xss-vulnerability?_s_id=c
erability/bamboo-enquiries/wordpress-bamboo-enquiries-plugin-1-9-3-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51860 State: PUBLISHED Published: 2024-11-19T16:31:29.434Z Last Updated: 2024-11-20T14:45:56.151Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: DuoGeek Products: Custom Dashboard Widget Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DuoGeek Custom Dashboard Widget allows Stored XSS.This issue affects Custom Dashboard Widget: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/create-custom-dashboard-widget/wordpress-custom-dashboard-widget-plugin-1-0-0-stored-cross-site
m/database/vulnerability/create-custom-dashboard-widget/wordpress-custom-dashboard-widget-plugin-1-0-0-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51861 State: PUBLISHED Published: 2024-11-19T16:31:28.916Z Last Updated: 2024-11-20T14:46:35.454Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: duogeek Products: EventPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in duogeek EventPress allows Stored XSS.This issue affects EventPress: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-eventpress/wordpress-eventpress-plugin-1-0-0-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51862 State: PUBLISHED Published: 2024-11-19T16:31:28.369Z Last Updated: 2024-11-20T14:47:02.831Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Baptiste Wicht Products: Google Visualization Charts Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Baptiste Wicht Google Visualization Charts allows Stored XSS.This issue affects Google Visualization Charts: from n/a through 0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/google-visualization-charts/wordpress-google-visualization-charts-plugi
- https://patchstack.com/database/vulnerability/google-visualization-charts/wordpress-google-visualization-charts-plugin-0-1-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51863 State: PUBLISHED Published: 2024-11-19T16:31:27.798Z Last Updated: 2024-11-20T14:26:15.308Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Team Profit-Funnels Products: PF Timer Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Team Profit-Funnels PF Timer allows Stored XSS.This issue affects PF Timer: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/pf-timer/wordpress-pf-timer-plugin-1-0-0-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51864 State: PUBLISHED Published: 2024-11-19T16:31:27.273Z Last Updated: 2024-11-20T14:36:15.965Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Agnel Waghela Products: Shortcode Collection Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Agnel Waghela Shortcode Collection allows Stored XSS.This issue affects Shortcode Collection: from n/a through 1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/shortcode-collection/wordpress-shortcode-collection-plugin-1-4-stored-cross-site-scripting-xss
om/database/vulnerability/shortcode-collection/wordpress-shortcode-collection-plugin-1-4-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51865 State: PUBLISHED Published: 2024-11-19T16:31:26.762Z Last Updated: 2024-11-20T14:36:16.075Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: N.O.U.S. Open Useful and Simple Products: Simple Social Share Block Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in N.O.U.S. Open Useful and Simple Simple Social Share Block allows Stored XSS.This issue affects Simple Social Share Block: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/simple-social-share-block/wordpress-simpl
ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/simple-social-share-block/wordpress-simple-social-share-block-plugin-1-0-0-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51866 State: PUBLISHED Published: 2024-11-19T16:31:26.250Z Last Updated: 2024-11-20T14:36:16.213Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Mr. Riponshah Products: Social button Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mr. Riponshah Social button allows Stored XSS.This issue affects Social button: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/social-button/wordpress-social-button-plugin-1-3-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51867 State: PUBLISHED Published: 2024-11-19T16:31:25.725Z Last Updated: 2024-11-20T14:36:16.316Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Alexander Conroy Products: Simpul Events by Esotech Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alexander Conroy Simpul Events by Esotech allows Stored XSS.This issue affects Simpul Events by Esotech: from n/a through 1.8.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/simpul-events-by-esotech/wordpress-simpul-events-by-esotech-plugin-1-8-5-c
https://patchstack.com/database/vulnerability/simpul-events-by-esotech/wordpress-simpul-events-by-esotech-plugin-1-8-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51868 State: PUBLISHED Published: 2024-11-19T16:31:25.194Z Last Updated: 2024-11-20T14:36:16.411Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: DuoGeek Products: DuoGeek Blocks Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DuoGeek DuoGeek Blocks allows Stored XSS.This issue affects DuoGeek Blocks: from n/a through .1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/duogeek-blocks/wordpress-duogeek-blocks-plugin-0-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51869 State: PUBLISHED Published: 2024-11-19T16:31:24.583Z Last Updated: 2024-11-20T14:26:15.436Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Best WP Developer Products: Gutenium Blocks Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Best WP Developer Gutenium Blocks allows Stored XSS.This issue affects Gutenium Blocks: from n/a through 1.1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/gutenium/wordpress-gutenium-blocks-plugin-1-1-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51870 State: PUBLISHED Published: 2024-11-19T16:31:24.004Z Last Updated: 2024-11-20T14:26:15.540Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: aniketji007 Products: Ultimate Flipbox Addon for Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aniketji007 Ultimate Flipbox Addon for Elementor allows Stored XSS.This issue affects Ultimate Flipbox Addon for Elementor: from n/a through .4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ultimate-flipbox-addon-for-elementor/wordpress-ulti
ichment: References: - https://patchstack.com/database/vulnerability/ultimate-flipbox-addon-for-elementor/wordpress-ultimate-flipbox-addon-for-elementor-plugin-1-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51871 State: PUBLISHED Published: 2024-11-19T16:31:23.476Z Last Updated: 2024-11-20T14:26:15.740Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Luzuk Products: Luzuk Team Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Luzuk Luzuk Team allows Stored XSS.This issue affects Luzuk Team: from n/a through 0.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/luzuk-team/wordpress-luzuk-team-plugin-0-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51872 State: PUBLISHED Published: 2024-11-19T16:31:22.967Z Last Updated: 2024-11-20T14:26:15.844Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Luzuk Products: Luzuk Testimonials Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Luzuk Luzuk Testimonials allows Stored XSS.This issue affects Luzuk Testimonials: from n/a through 0.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/luzuk-testimonials/wordpress-luzuk-testimonials-plugin-0-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51873 State: PUBLISHED Published: 2024-11-19T16:31:22.425Z Last Updated: 2024-11-20T14:26:15.946Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: matorel Products: Multi-day Booking Calendar Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in matorel Multi-day Booking Calendar allows DOM-Based XSS.This issue affects Multi-day Booking Calendar: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/multi-day-booking-calendar/wordpress-multi-day-booking-calendar-plugin-1-0-1-cross-
atchstack.com/database/vulnerability/multi-day-booking-calendar/wordpress-multi-day-booking-calendar-plugin-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51874 State: PUBLISHED Published: 2024-11-19T16:31:21.914Z Last Updated: 2024-11-20T14:26:16.054Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: ParOne, Inc. Products: ParOne Feeds Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ParOne, Inc. ParOne Feeds allows DOM-Based XSS.This issue affects ParOne Feeds: from n/a through 1.17.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/parone/wordpress-parone-feeds-plugin-1-17-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51875 State: PUBLISHED Published: 2024-11-19T16:31:21.383Z Last Updated: 2024-11-20T14:26:16.207Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Nazmul Ahsan Products: MDC YouTube Downloader Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nazmul Ahsan MDC YouTube Downloader allows DOM-Based XSS.This issue affects MDC YouTube Downloader: from n/a through 3.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mdc-youtube-downloader/wordpress-mdc-youtube-downloader-plugin-3-0-0-cross-site-scrip
chstack.com/database/vulnerability/mdc-youtube-downloader/wordpress-mdc-youtube-downloader-plugin-3-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51876 State: PUBLISHED Published: 2024-11-19T16:31:20.860Z Last Updated: 2024-11-20T14:26:16.320Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Codstack Team Products: wp_automatic_widget Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codstack Team wp_automatic_widget allows DOM-Based XSS.This issue affects wp_automatic_widget: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-automatic-widget/wordpress-wp-automatic-widget-plugin-1-0-1-cross-site-scripting-xss-vuln
.com/database/vulnerability/wp-automatic-widget/wordpress-wp-automatic-widget-plugin-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51877 State: PUBLISHED Published: 2024-11-19T16:31:20.327Z Last Updated: 2024-11-20T14:26:16.427Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: straightvisions GmbH Products: SV Forms Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in straightvisions GmbH SV Forms allows DOM-Based XSS.This issue affects SV Forms: from n/a through 2.0.05. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/sv-forms/wordpress-sv-forms-plugin-2-0-05-cross-site-scripting-xss-vulnerability?_s_id=cve