Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-51878 State: PUBLISHED Published: 2024-11-19T16:31:19.764Z Last Updated: 2024-11-20T14:26:16.529Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Joey Straile Products: AchillesTheme-shortcodes Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joey Straile AchillesTheme-shortcodes allows DOM-Based XSS.This issue affects AchillesTheme-shortcodes: from n/a through 0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/achilles-shortcodes/wordpress-achillestheme-shortcodes-plugin-0-1-cross-site-scri
/patchstack.com/database/vulnerability/achilles-shortcodes/wordpress-achillestheme-shortcodes-plugin-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51879 State: PUBLISHED Published: 2024-11-19T16:31:19.242Z Last Updated: 2024-11-20T14:36:16.520Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Arash Heidari Products: Text Advertisements Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arash Heidari Text Advertisements allows Stored XSS.This issue affects Text Advertisements: from n/a through 2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/text-advertisements/wordpress-text-advertisements-plugin-2-1-cross-site-scripting-xss-vulnerabili
database/vulnerability/text-advertisements/wordpress-text-advertisements-plugin-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51880 State: PUBLISHED Published: 2024-11-19T16:31:18.688Z Last Updated: 2024-11-20T14:36:16.629Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: BeBetter Hotels Products: BeBetter Social Icons Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BeBetter Hotels BeBetter Social Icons allows DOM-Based XSS.This issue affects BeBetter Social Icons: from n/a through 2.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/bebetter-social-icons/wordpress-bebetter-social-icons-plugin-2-7-cross-site-scriptin
tchstack.com/database/vulnerability/bebetter-social-icons/wordpress-bebetter-social-icons-plugin-2-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51881 State: PUBLISHED Published: 2024-11-19T16:31:18.149Z Last Updated: 2024-11-20T14:36:16.731Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Beautimour Products: Be Shortcodes Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Beautimour Be Shortcodes allows DOM-Based XSS.This issue affects Be Shortcodes: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/be-shortcodes/wordpress-be-shortcodes-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51882 State: PUBLISHED Published: 2024-11-11T06:00:30.061Z Last Updated: 2024-11-12T14:53:27.879Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: Ehues Products: Gboy Custom Google Map Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ehues Gboy Custom Google Map allows Blind SQL Injection.This issue affects Gboy Custom Google Map: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/gboy-custom-google-map/wordpress-gboy-custom-google-map-plugin-1-2-sql-injection-vulnerability?_s
database/vulnerability/gboy-custom-google-map/wordpress-gboy-custom-google-map-plugin-1-2-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-51883 State: PUBLISHED Published: 2024-11-19T16:31:17.533Z Last Updated: 2024-11-20T14:36:16.836Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Micha Products: I Plant A Tree Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Micha I Plant A Tree allows Stored XSS.This issue affects I Plant A Tree: from n/a through 1.7.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/i-plant-a-tree/wordpress-i-plant-a-tree-plugin-1-7-3-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51884 State: PUBLISHED Published: 2024-11-19T16:31:16.965Z Last Updated: 2024-11-20T14:36:16.947Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Takashi Matsuyama Products: Posts Search Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Takashi Matsuyama Posts Search allows Stored XSS.This issue affects Posts Search: from n/a through 1.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/posts-search/wordpress-posts-search-plugin-1-2-2-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51885 State: PUBLISHED Published: 2024-11-19T16:31:16.424Z Last Updated: 2024-11-20T14:26:16.633Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Takashi Matsuyama Products: Browsing History Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Takashi Matsuyama Browsing History allows Stored XSS.This issue affects Browsing History: from n/a through 1.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/browsing-history/wordpress-browsing-history-plugin-1-3-1-stored-cross-site-scripting-xss-vulnera
/database/vulnerability/browsing-history/wordpress-browsing-history-plugin-1-3-1-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51886 State: PUBLISHED Published: 2024-11-19T16:31:15.866Z Last Updated: 2024-11-20T14:26:16.738Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Takashi Matsuyama Products: Posts Filter Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Takashi Matsuyama Posts Filter allows Stored XSS.This issue affects Posts Filter: from n/a through 1.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/posts-filter/wordpress-posts-filter-plugin-1-3-1-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51887 State: PUBLISHED Published: 2024-11-19T16:31:15.219Z Last Updated: 2024-11-20T14:26:16.845Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Ryan Sutana Products: NV Slider Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ryan Sutana NV Slider allows Stored XSS.This issue affects NV Slider: from n/a through 1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/nv-slider/wordpress-nv-slider-plugin-1-6-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51888 State: PUBLISHED Published: 2025-01-21T13:40:33.816Z Last Updated: 2025-01-21T15:50:09.514Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: NotFound Products: Homey Login Register Problem Types: CWE-266 Description: Incorrect Privilege Assignment vulnerability in NotFound Homey Login Register allows Privilege Escalation. This issue affects Homey Login Register: from n/a through 2.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/homey-login-register/vulnerability/wordpress-homey-login-register-plugin-2-4-0-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2024-51889 State: PUBLISHED Published: 2024-11-19T16:31:14.446Z Last Updated: 2024-11-20T14:26:16.947Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: GeroNikolov Products: Fancy User List Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GeroNikolov Fancy User List allows Stored XSS.This issue affects Fancy User List: from n/a through 3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/fancy-user-listing/wordpress-fancy-user-list-plugin-3-1-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51890 State: PUBLISHED Published: 2024-11-19T16:31:13.867Z Last Updated: 2024-11-20T14:26:17.073Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: geoWP Products: Geoportail Shortcode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in geoWP Geoportail Shortcode allows Stored XSS.This issue affects Geoportail Shortcode: from n/a through 2.4.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/geoportail-shortcode/wordpress-geoportail-shortcode-plugin-2-4-4-stored-cross-site-scripting-xss-vulnerabili
lnerability/geoportail-shortcode/wordpress-geoportail-shortcode-plugin-2-4-4-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51891 State: PUBLISHED Published: 2024-11-19T16:31:13.264Z Last Updated: 2024-11-20T14:26:17.190Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: 4B Systems sp. z o.o Products: Official SalesWizard CRM Plugin Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 4B Systems sp. z o.o Official SalesWizard CRM Plugin allows Stored XSS.This issue affects Official SalesWizard CRM Plugin: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/official-saleswizard-crm/wordpress-official-s
Vulnrichment: References: - https://patchstack.com/database/vulnerability/official-saleswizard-crm/wordpress-official-saleswizard-crm-plugin-plugin-1-0-2-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51892 State: PUBLISHED Published: 2024-11-19T16:31:12.600Z Last Updated: 2024-11-20T14:26:17.298Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: naa986 Products: Sell Media File with Stripe Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in naa986 Sell Media File with Stripe allows Stored XSS.This issue affects Sell Media File with Stripe: from n/a through 1.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/sell-media-file/wordpress-sell-media-file-with-stripe-plugin-1-0-6-stored-cross-site-
chstack.com/database/vulnerability/sell-media-file/wordpress-sell-media-file-with-stripe-plugin-1-0-6-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51893 State: PUBLISHED Published: 2024-11-19T16:31:12.030Z Last Updated: 2024-11-20T14:26:17.403Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: ThemeAtelier Products: Postify: Post Layout For Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeAtelier Postify: Post Layout For Elementor allows DOM-Based XSS.This issue affects Postify: Post Layout For Elementor: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/postify-for-elementor/wordpress-postify-post-layo
nrichment: References: - https://patchstack.com/database/vulnerability/postify-for-elementor/wordpress-postify-post-layout-for-elementor-plugin-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51894 State: PUBLISHED Published: 2024-11-19T16:31:11.513Z Last Updated: 2024-11-20T14:26:17.497Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Reyzua Products: Topbar ID for Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Reyzua Topbar ID for Elementor allows DOM-Based XSS.This issue affects Topbar ID for Elementor: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/topbar-id-for-elementor/wordpress-topbar-id-for-elementor-plugin-1-0-1-cross-site-scripting-xs
om/database/vulnerability/topbar-id-for-elementor/wordpress-topbar-id-for-elementor-plugin-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51895 State: PUBLISHED Published: 2024-11-19T16:31:10.967Z Last Updated: 2024-11-20T14:26:17.602Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Minical Products: Minical Hotel Booking Plugin Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Minical Minical Hotel Booking Plugin allows Stored XSS.This issue affects Minical Hotel Booking Plugin: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/minical/wordpress-minical-hotel-booking-plugin-plugin-1-0-2-stored-cross-site-sc
//patchstack.com/database/vulnerability/minical/wordpress-minical-hotel-booking-plugin-plugin-1-0-2-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51896 State: PUBLISHED Published: 2024-11-19T16:31:10.412Z Last Updated: 2024-11-20T14:36:17.051Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: webvitaly Products: Magic Slider Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webvitaly Magic Slider allows Stored XSS.This issue affects Magic Slider: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/magic-slider/wordpress-magic-slider-plugin-1-3-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51897 State: PUBLISHED Published: 2024-11-19T16:31:09.856Z Last Updated: 2024-11-20T14:36:17.175Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Erik Saulnier Products: News Articles Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Erik Saulnier News Articles allows Stored XSS.This issue affects News Articles: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/news-articles/wordpress-news-articles-plugin-1-0-0-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51898 State: PUBLISHED Published: 2024-11-19T16:31:09.285Z Last Updated: 2024-11-20T14:36:17.284Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Sachin Jadhav Products: Semantic Shortcode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sachin Jadhav Semantic Shortcode allows Stored XSS.This issue affects Semantic Shortcode: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/semantic-shortcode/wordpress-semantic-shortcode-plugin-1-0-1-cross-site-scripting-xss-vulnerabilit
atabase/vulnerability/semantic-shortcode/wordpress-semantic-shortcode-plugin-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51899 State: PUBLISHED Published: 2024-11-19T16:31:08.587Z Last Updated: 2024-11-20T14:26:17.705Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: SEO Themes Products: Simple Pricing Table Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SEO Themes Simple Pricing Table allows Stored XSS.This issue affects Simple Pricing Table: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/simple-pricing-table/wordpress-simple-pricing-table-plugin-1-0-0-cross-site-scripting-xss-vulnerab
atabase/vulnerability/simple-pricing-table/wordpress-simple-pricing-table-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51900 State: PUBLISHED Published: 2024-12-02T13:49:10.609Z Last Updated: 2024-12-02T18:53:03.487Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Richard K Miller Products: What Would Seth Godin Do Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Richard K Miller What Would Seth Godin Do allows Stored XSS.This issue affects What Would Seth Godin Do: from n/a through 2.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/what-would-seth-godin-do/vulnerability/wordpress-what-would-seth-godin-
https://patchstack.com/database/wordpress/plugin/what-would-seth-godin-do/vulnerability/wordpress-what-would-seth-godin-do-plugin-2-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51901 State: PUBLISHED Published: 2024-11-19T16:31:07.950Z Last Updated: 2024-11-20T14:26:17.817Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Wojciech Borowicz Products: Smooth Maps Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wojciech Borowicz Smooth Maps allows Stored XSS.This issue affects Smooth Maps: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/colour-smooth-maps/wordpress-smooth-maps-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51902 State: PUBLISHED Published: 2024-11-19T16:31:07.333Z Last Updated: 2024-11-20T14:26:17.926Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Oliver Schaal Products: TinyCode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Oliver Schaal TinyCode allows Stored XSS.This issue affects TinyCode: from n/a through 1.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/tinycode/wordpress-tinycode-plugin-1-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51903 State: PUBLISHED Published: 2024-11-19T16:31:06.727Z Last Updated: 2024-11-20T14:26:18.045Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: imFORZA Products: WP Listings Pro Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in imFORZA WP Listings Pro allows Stored XSS.This issue affects WP Listings Pro: from n/a through 3.0.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-listings-pro/wordpress-wp-listings-pro-plugin-3-0-14-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51904 State: PUBLISHED Published: 2024-11-19T16:31:06.201Z Last Updated: 2024-11-20T14:26:18.191Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Joan Boluda Products: Embed documents shortcode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joan Boluda Embed documents shortcode allows Stored XSS.This issue affects Embed documents shortcode: from n/a through 1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/embed-documents-shortcode/wordpress-embed-documents-shortcode-plugin-1-5-stored-cro
atchstack.com/database/vulnerability/embed-documents-shortcode/wordpress-embed-documents-shortcode-plugin-1-5-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51905 State: PUBLISHED Published: 2024-11-19T16:31:05.679Z Last Updated: 2024-11-20T14:26:18.348Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Ravi & Suma Products: RSV PDF Preview Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ravi & Suma RSV PDF Preview allows Stored XSS.This issue affects RSV PDF Preview: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/rsv-pdf-preview/wordpress-rsv-pdf-preview-plugin-1-0-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51906 State: PUBLISHED Published: 2024-11-19T16:31:05.126Z Last Updated: 2024-11-20T14:26:18.447Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Rapid Sort Products: RSV 360 View Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rapid Sort RSV 360 View allows DOM-Based XSS.This issue affects RSV 360 View: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/rsv-360-view/wordpress-rsv-360-view-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51907 State: PUBLISHED Published: 2024-11-19T16:31:04.564Z Last Updated: 2024-11-20T14:26:18.553Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: codemenschen Products: WP Virtual Room Configurator Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codemenschen WP Virtual Room Configurator allows Stored XSS.This issue affects WP Virtual Room Configurator: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/configure-conference-room/wordpress-wp-virtual-room-configurator-plugi
: - https://patchstack.com/database/vulnerability/configure-conference-room/wordpress-wp-virtual-room-configurator-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51908 State: PUBLISHED Published: 2024-11-19T16:31:03.992Z Last Updated: 2024-11-20T14:26:18.661Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Gonzalo Geraldo Products: Adventure Bucket List Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gonzalo Geraldo Adventure Bucket List allows DOM-Based XSS.This issue affects Adventure Bucket List: from n/a through 1.0.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/adventure-bucket-list/wordpress-adventure-bucket-list-plugin-1-0-9-cross-site-scri
patchstack.com/database/vulnerability/adventure-bucket-list/wordpress-adventure-bucket-list-plugin-1-0-9-cross-site-scripting-xss-vulnerability?_s_id=cve